your-ai-workflow-firebase-os@1.3.0

High-risk behavior combination matched malicious policy.

npm install runs the postinstall lifecycle hook.

The package can take over application entry points, influence AI agents working in the project, and persist its build plugin without an explicit setup command.

Install-time consumer-project and AI-agent control-surface mutation.

A normal npm install invokes the package’s postinstall hook. That hook clears existing CSS, overwrites the consumer’s main application files, adds dependencies, patches Vite configuration to load its plugin, and creates project-root AGENTS.md and GEMINI.md instructions. These changes occur without an explicit user setup command and affect both the consumer project and its AI-agent control surface.

This is concrete unconsented postinstall mutation of a consumer project and broad AI-agent control surface. The absence of a self-dependency does not neutralize the install-hook abuse.