npm AI-agent policy reports, with evidence.

This is an unconsented postinstall mutation of a foreign, broad AI-agent control surface. The source directly establishes persistence and execution triggers rather than merely exposing a...

源码确认了安装时对多个非本包拥有的 AI 工具用户配置的持久化修改，满足阻断条件。运行时还存在向默认远程 MCP 服务转发本地认证配置的具体链路。

The lifecycle path concretely modifies broad Codex control surfaces and project hooks/configuration during installation. This meets the blocking policy even though no data-exfiltration ch...

Source inspection confirms unconsented postinstall mutation of global and project AI-agent control surfaces. This meets the firewall block boundary regardless of the absence of confirmed...

This is concrete unconsented postinstall mutation of foreign/broad AI-agent configuration, meeting the blocking policy even though no direct credential exfiltration was observed.

Source inspection confirms the lifecycle hook performs unconsented, broad AI-agent configuration and hook mutations. This meets the install-control-surface block boundary even though no s...

Source inspection confirms unconsented postinstall mutation of a broad foreign AI-agent control surface. This meets the install-control-surface blocking rule.

This is a concrete unconsented postinstall AI-agent control-surface mutation, meeting the block boundary. Lack of a confirmed exfiltration endpoint does not mitigate the persistent hook/c...

The package’s automatic install-time modification of global/project Codex configuration and lifecycle hooks meets the blocking policy for foreign broad AI-agent control-surface mutation....

The lifecycle code implements concrete, default-on mutation of foreign/broad Codex configuration and extensions. Guardrails and opt-outs do not make the install-time action consented.

Direct inspection confirms the policy-defined block condition: postinstall performs unconsented mutation of foreign/broad Codex control surfaces. Guardrails and backups do not remove the...

Source inspection confirms the lifecycle hook performs broad Codex and project-control-surface mutations by default. This meets the firewall block boundary for unconsented postinstall AI-...

Direct source inspection confirms unconsented postinstall writes to global Codex and agent configuration, including auth-related files and MCP setup. This meets the firewall block policy...

Source inspection confirms a concrete, unconsented postinstall mutation of broad AI-agent control files, sourced from a remote mutable archive. This meets the blocking policy.

The lifecycle hook concretely mutates a foreign AI-agent implementation during installation. Its narrow, version-checked patch does not remove the unconsented cross-package control-surfac...

The lifecycle hook establishes and enables agent extensions across unrelated tools at install time, including unconditional Claude mutation and Codex config changes. This meets the instal...

This is concrete unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The absence of network exfiltration does not remove the install-time control-surface abuse.

Source inspection confirms unconsented install-time persistence across multiple third-party AI-agent configurations, meeting the block policy despite no confirmed install-time exfiltration.

The source confirms unconsented postinstall mutation of the consuming project's shared AI-agent instruction file. Under the firewall policy this concrete control-surface write requires bl...

This is concrete, unconsented install-time mutation of broad foreign AI-agent control surfaces, meeting the blocking policy. The absence of install-time networking does not mitigate the p...

Direct source inspection confirms an install-time cross-agent control-surface mutation and a runtime silent-upgrade path that repeats it. This meets the blocking policy regardless of the...