npm AI-agent policy reports, with evidence.

The package has a concrete unconsented postinstall chain that mutates a broad, user-level AI-agent control surface and installs foreign extensions. No exfiltration was found, but the life...

Source inspection confirms automatic postinstall mutation of foreign, global AI-agent instruction surfaces. Under the install-control-surface policy, this is concrete malicious behavior r...

Direct inspection confirms unconsented postinstall mutation of multiple foreign/broad AI-agent configuration and instruction surfaces. The missing hook source limits one attempted hook pa...

Source inspection confirms an unconsented postinstall write to a foreign host project's AI-agent configuration surface. This meets the install-control-surface block boundary even though n...

Under the provided policy, unconsented npm postinstall mutation of a broad AI-agent control surface is blockable even when the behavior is package-aligned. The inspected source supports t...

The source confirms an unconsented postinstall write into a dependency-owned AI/OAuth sign-in callback surface, which matches the block policy even though the observed payload is cosmetic...

Source inspection confirms concrete install-time writes into Claude Code control files, including persistent hooks that affect later agent behavior. Under the provided policy, unconsented...

Source inspection confirms the scanner’s key finding: a postinstall hook mutates broad/foreign AI-agent control surfaces in the consumer project. Under the install-control-surface policy,...

Source inspection confirms unconsented postinstall mutation of broad/foreign AI-agent control surfaces, which meets the block policy even though the shipped skill content is mostly packag...

Source inspection confirms a concrete policy-blocking behavior: install-time mutation of broad, foreign AI-agent control surfaces. The absence of network exfiltration or obfuscation lower...

Source inspection confirms unconsented postinstall mutation of broad third-party AI-agent control surfaces, which meets the block policy even though the bundled Perfetto skill itself appe...

Source inspection confirms unconsented npm postinstall mutation of multiple foreign/broad AI-agent skill directories, which meets the block policy even though the bundled skill appears pa...

Static inspection confirms unconsented postinstall mutation of a broad/foreign AI-agent control surface, which meets the firewall block policy even though the runtime auth code otherwise...

Source inspection confirms install-time project AI-agent configuration mutation, which matches the firewall block policy even though scanner exfiltration hints were noisy. No concrete cre...

Source inspection confirms unconsented npm postinstall mutation of foreign/broad AI-agent control surfaces, which meets the block policy even though the MCP functionality itself appears p...

The package crosses the LPM block boundary because postinstall unconsentedly writes package-supplied AI-agent skills/agents/control files into foreign/broad IDE directories. Scanner simil...

Under the install control surface policy, unconsented npm postinstall mutation of foreign/broad AI-agent control surfaces is blockable even when the payload is package-aligned and no exfi...

Static inspection confirms automatic postinstall mutation of multiple broad AI-agent skill directories, matching the policy for blocking unconsented install-time mutation of foreign/broad...

Static inspection confirms a postinstall hook mutates broad/foreign AI-agent control surfaces without requiring an explicit setup command, which matches the firewall block policy. The res...

Static inspection confirms a postinstall external sync command tied to AI-agent hook/control-surface behavior, which meets the policy boundary for blocking unconsented install-time mutati...

The decisive behavior is not ordinary CLI networking; it is unconsented postinstall mutation of foreign/broad AI-agent control surfaces. Under the provided policy this should be blocked e...