npm AI-agent policy reports, with evidence.

This is a concrete unconsented postinstall mutation of broad, foreign AI-agent control surfaces, meeting the blocking policy. The hardening of some OpenCode rules does not remove the auto...

Source confirms an unconsented postinstall write to foreign project-root AI-agent control files. This meets the install-control-surface publish-block boundary even though no exfiltration...

The package has a concrete unconsented postinstall chain that persistently mutates broad, cross-vendor AI-agent control surfaces. This meets the install-control-surface block boundary des...

The postinstall hook performs unconsented mutation of foreign/broad AI-agent skill surfaces. That concrete lifecycle behavior meets the blocking policy even though no credential exfiltrat...

The global-install guard limits scope but does not obtain user consent or prevent modification of the default Codex agent and shared host configuration. This meets the install-time foreig...

This is a concrete, unconsented postinstall mutation of foreign/broad AI-agent control surfaces. Localhost-only networking does not mitigate the install-time agent configuration changes.

This is an unconsented postinstall mutation of broad third-party AI-agent control surfaces, coupled with an unverified remote native-payload chain and persistence. The guards and careful...

Although the installed content is package-aligned and no exfiltration or remote execution was found, the npm postinstall automatically installs behavior-bearing Claude Code configuration...

This is concrete unconsented postinstall mutation of broad AI-agent control surfaces coupled with persistence and remote egress. The later consent gate does not undo or precede the instal...

The lifecycle hook performs default-approved writes to a foreign project’s Claude Code files. The absence of exfiltration does not remove the policy-defined install-time agent-control hij...

The lifecycle hook automatically installs package-controlled agent instructions into multiple global AI-client control surfaces. That concrete install-time mutation meets the blocking pol...

The package concretely performs unconsented postinstall mutation of consumer AGENTS.md/CLAUDE.md and build scripts. This meets the blocking policy for foreign/broad AI-agent control-surfa...

This is unconsented postinstall mutation of a broad, foreign AI-agent control surface. The benign-looking statusline purpose does not remove the persistent global command injection.

This is concrete, unconsented postinstall mutation of a broad foreign AI-agent control surface. The observed lifecycle behavior meets the firewall block boundary even without confirmed da...

The install hook implements concrete, unconsented mutation of broad foreign AI-agent skill locations. Absence of exfiltration does not remove that install-time control-surface risk.

The install-time mutation of Claude Desktop configuration is concrete and unconsented. This meets the blocking policy even though the runtime editor functionality appears package-aligned.

The confirmed install-time Claude Desktop configuration mutation meets the block policy for a foreign/broad AI-agent control surface. Other shell and network features are runtime video-ed...

Source inspection confirms a postinstall hook that mutates a broad set of foreign AI-agent configuration files. This meets the install-control-surface block criterion regardless of the op...

Direct source inspection confirms a concrete, automatic postinstall AI-agent control-surface takeover. The absence of exfiltration does not mitigate the unconsented cross-tool persistence.

The lifecycle source establishes an unconsented postinstall mutation of foreign, broad AI-agent control surfaces. This meets the blocking policy despite no observed network exfiltration.

The postinstall hook performs unconsented mutation of a broad, foreign AI-agent control surface. This meets the blocking policy regardless of the package's stated browser-automation purpose.