npm AI-agent policy reports, with evidence.

Direct inspection confirms unconsented postinstall mutation of global Claude Code installation files plus runtime network-control injection. This meets the firewall block boundary for for...

This is a concrete unconsented `postinstall` mutation of a foreign AI-agent control surface, meeting the block boundary. The lack of credential exfiltration does not mitigate the lifecycl...

This is a concrete unconsented postinstall mutation of a foreign AI-agent control surface. The benign-looking skill content does not remove the automatic overwrite behavior.

Source inspection confirms a postinstall hook modifies home-level AI-agent instruction directories outside the installed project. This meets the firewall block boundary for unconsented in...

The distributed runtime bundle appears package-aligned, but the install-time script persistently writes AI-agent control instructions into consumer projects without user consent. That con...

The package has a concrete, automatic postinstall control-surface mutation targeting consumer-project agent instructions. Lack of exfiltration does not remove the policy-triggering AI-age...

The package contains a concrete automatic postinstall write to consumer AI-agent instruction files. The absence of exfiltration does not remove this policy-defined control-surface attack.

Source inspection confirms unconsented postinstall writes to broad AI-agent skill roots. Policy requires blocking this concrete lifecycle control-surface mutation even though no credentia...

Direct source inspection confirms an automatic postinstall writes foreign Claude configuration and instruction files, then injects a mutable `@latest` MCP launcher. This meets the firewal...

Source inspection confirms an install-time mutation of foreign, broad AI-agent configuration files that persists package-controlled session instructions. This meets the blocking policy de...

Source inspection confirms an unconsented postinstall mutation of foreign, broad AI-agent control surfaces. Under the stated policy this is concrete malicious behavior regardless of the b...

This is a concrete, unconsented postinstall mutation of a consuming project's AI-agent control files. The behavior meets the blocking policy regardless of the absence of credential exfilt...

The source confirms the scanner’s central finding: an automatic npm lifecycle hook modifies broad AI-agent skill roots. Transparency in the README and absence of exfiltration reduce ambig...

Direct inspection confirms an automatic install-time chain that writes package-authored configuration into foreign AI-agent directories. This meets the firewall block boundary regardless...

The automatic postinstall agent-control-file writes are concrete and meet the install-time control-surface hijack boundary. Other network and shell capabilities are confined to explicitly...

The source confirms unconsented install-time mutation of the consuming project's `.claude` agent configuration. Although no exfiltration or remote execution was found, this meets the fire...

The package has concrete unconsented postinstall writes to consumer AI-agent instruction files. Although no exfiltration or remote execution was found, this meets the blocking policy for...

Source inspection confirms the critical behavior rather than merely scanner similarity: the postinstall hook persistently writes package-controlled agent instructions into the consuming p...

The package has a concrete postinstall persistence mechanism targeting multiple foreign/broad AI-agent instruction directories. The benign binary launcher does not mitigate this automatic...

The package performs an unconsented install-time write to consumer-owned AI-agent instruction files. This concrete behavior meets the blocking policy despite the absence of exfiltration o...

The package performs unconsented install-time registration of a Chrome MCP bridge, a foreign/broad AI-agent control surface. No direct exfiltration was confirmed, but the lifecycle mutati...