opsfuse-ui@0.1.21

High-risk behavior combination matched malicious policy.

npm install of opsfuse-ui as a dependency

Consumer AI agent behavior can be influenced by package-supplied instructions after install.

postinstall copies bundled .claude skills into host project

On dependency install, npm runs scripts/postinstall.mjs. When installed under node_modules, it resolves the host project root two directories above the package and force-copies selected bundled Claude Code skills into the host .claude/skills directory, altering future AI-agent instructions without an explicit user command at runtime.

Static inspection confirms unconsented lifecycle mutation of a host AI-agent control surface via postinstall, which is blocking behavior for the firewall even without credential theft or network exfiltration. The remaining package code appears to be a React UI library, but that does not remove the install-time control-surface write. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.