warden-ai@0.2.0

One or more suspicious static signals were detected.

npm installation executes postinstall.

Future AI-agent sessions can be redirected to package-provided tools and instructions across multiple platforms and projects.

postinstall invokes init, which mass-registers MCP configs and writes agent rules.

On npm install, bin/postinstall.cjs invokes `warden init --skip-index` with output suppressed. The init command writes managed global rules for Claude, Codex, Cursor, Gemini, Cline, and others; creates or modifies project AI instruction files; and registers a Warden MCP server in numerous third-party agent configurations. These broad control-surface mutations occur without a user-invoked setup command.

This is concrete, unconsented postinstall mutation of foreign and broad AI-agent configuration/control surfaces. The absence of exfiltration does not mitigate the automatic cross-agent persistence behavior.