npm AI-agent policy reports, with evidence.

The package performs unconsented postinstall mutation of a foreign, user-wide AI-agent control surface. This meets the install-control-surface block boundary regardless of the benign-look...

This is concrete unconsented postinstall mutation of foreign, broad AI-agent control surfaces. It meets the firewall block policy even though no separate exfiltration chain was found.

This is a concrete, unconsented postinstall mutation of a foreign broad AI-agent control surface. The documented product purpose does not remove the install-time control-surface impact.

Source inspection confirms a concrete postinstall chain that modifies consumer .npmrc and multiple AI-agent configuration surfaces. This meets the policy boundary for an unconsented insta...

The package's stated integration purpose does not justify its unconsented postinstall mutation of a foreign global AI-agent control surface. This meets the firewall block criterion even t...

This is a concrete unconsented postinstall mutation of broad/foreign AI-agent control surfaces, compounded by unchecked remote binary staging. The absence of observed exfiltration does no...

This is concrete unconsented postinstall mutation of foreign and broad AI-agent control surfaces, which meets the blocking policy. The local MCP implementation does not mitigate the insta...

The automatic global postinstall materially alters third-party agent skill directories, rather than merely preparing this package. The skip flag and marker checks do not provide user cons...

Source confirms an unconsented npm postinstall mutation of broad foreign AI-agent control surfaces. This meets the blocking install-control-surface policy independently of the telemetry c...

This is a concrete, unconsented postinstall mutation of a broad AI-agent control surface, with remote code execution in the same lifecycle. Documentation and defensive settings parsing do...

Source inspection confirms a concrete, automatic postinstall mutation of foreign/broad AI-agent instruction files. Under the install-control-surface policy, this is blocking even though n...

This is a concrete unconsented postinstall mutation of a broad foreign AI-agent control surface, compounded by remote code execution from a mutable main-branch URL. Documentation does not...

This is a concrete unconsented npm postinstall mutation of broad foreign AI-agent control surfaces. The lifecycle hook also introduces unpinned remote instructions into those surfaces.

Direct source inspection confirms unconsented postinstall persistence across broad third-party AI-agent control surfaces. This meets the blocking policy regardless of the package’s stated...

The source establishes an unconsented postinstall chain that changes multiple global AI-agent control surfaces and pulls additional tooling. This meets the blocking policy regardless of t...

The automatic, overwrite-capable postinstall mutation of third-party AI-agent control surfaces is a concrete blocked control-hijack behavior. No separate exfiltration or network payload w...

Source confirms the scanner finding: this is an unconsented postinstall chain that modifies multiple foreign AI-agent configurations and establishes persistence. That meets the firewall b...

The lifecycle hook performs the concrete foreign workspace AI-agent mutation prohibited by policy; no user command is required. Lack of exfiltration does not mitigate that install-time co...

The package performs concrete, unconsented postinstall mutation of broad foreign AI-agent control surfaces and establishes login persistence. Its stated product purpose does not remove th...

This is a concrete unconsented postinstall mutation of foreign AI-agent control surfaces (.kiro and .cursor). The absence of exfiltration does not remove that install-time control-surface...

Source inspection confirms an install-time write to `.kiro/steering` and `.cursor/rules`; this meets the policy's concrete foreign AI-agent control-surface mutation boundary. No separate...