Loading npm security reports…
Skip to main contentSoft block: AI-agent control surface2026-09-29 05:11Soft block: AI-agent control surface2026-09-29 05:11Soft block: AI-agent control surface2026-09-29 05:11Soft block: AI-agent control surface2026-09-29 04:52
npm threat feed
npm AI-agent policy reports, with evidence.
Review AI-agent capability abuse and control hijacking, including changes to agent configuration, instructions, or permissions. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 10
Updated 8 Oct 2026, 14:35 UTC. Ordered by latest scan.
@axiomantic/rhizo@0.1.4
This is concrete install-hook abuse: an automatic npm lifecycle hook changes multiple unrelated AI-agent configurations and installs a session-controlling plugin. The conditional director...
@axiomantic/garden@0.1.1
The automatic hook modifies foreign AI-agent rule directories and deletes existing configuration, which meets the install-control-surface blocking policy. Its automatic remote native-bina...
@axiomantic/vine@0.1.1
The package has a concrete automatic install-time path that mutates multiple external AI-agent instruction surfaces. This meets the blocking policy for unconsented post-install control-su...
@jenga-ai/agent@4.1.1
The package performs unconsented post-install mutation of multiple consumer AI-agent control surfaces. This meets the blocking policy for lifecycle-based control-surface modification.