npm AI-agent policy reports, with evidence.

The postinstall hook unconditionally mutates Claude Code and Codex user config to register this package's MCP server. That is unconsented install-time control of foreign agent surfaces, s...

The package performs concrete, automatic postinstall modification of foreign global AI-agent configurations. This meets the install-control-surface block condition.

The automatic lifecycle hook mutates a foreign global AI-agent installation and persistent user configuration. This meets the install-control-surface blocking policy even though no creden...

The automatic postinstall hook makes persistent changes to foreign AI-agent configuration rather than limiting integration to an explicit command or package-owned location. This is concre...

The automatic lifecycle chain forcibly writes package-controlled instructions into multiple third-party AI-agent directories. This meets the install-control-surface blocking policy.

The automatic postinstall mutation of the user's global Codex configuration is an unconsented change to a broad AI-agent control surface. This meets the install-control-surface blocking p...

The automatic post-install hook mutates broad, foreign AI-agent control surfaces and registers executable MCP servers. This is concrete unconsented lifecycle control-surface modification.

The automatic postinstall hook performs unconsented mutation of a broad AI-agent control surface, including global package installation and enabled agent configuration. This meets the ins...

The automatic lifecycle hook mutates third-party agent-plugin code and redirects its configuration under the package's namespace. Source-map removal further conceals the resulting install...

The package executes a persistent OpenCode configuration change automatically at install time, rather than through an explicit user command. This is concrete AI-agent control-surface hija...

The lifecycle hook performs automatic, non-interactive modification of a foreign AI-agent configuration directory. This meets the install-control-surface blocking criterion even though no...

The automatic lifecycle chain changes consumer package-manager settings and broad AI-agent control surfaces, then installs a Git hook. This meets the policy threshold for an unconsented i...

The package has a postinstall hook that modifies broad, foreign AI-agent control surfaces in the user's home directory. This meets the install-control-surface blocking rule even though no...

The automatic lifecycle hook provisions a foreign AI-agent CLI and persists shell configuration changes. This is concrete unconsented install-time control-surface mutation.

The package performs an unconsented postinstall invocation that installs AI-agent skills at project or global scope. This meets the install-control-surface blocking rule.

The package combines automatic lifecycle execution with writes to a foreign DSH host and user agent-skill catalog. The stated safeguards limit when files are changed but do not remove the...

This is unconsented post-install mutation of foreign, broad AI-agent control surfaces. It meets the blocking policy for AI-agent control hijacking.

The package performs automatic npm lifecycle mutation of global Claude Code and Codex MCP settings. This is a concrete AI-agent control-surface hijack under the install policy.

The automatic postinstall hook overwrites a foreign, potentially shared FastMCP consent implementation. This is concrete install-hook abuse of an AI-agent control surface.

The automatic postinstall performs remote code execution and changes a foreign AI-agent configuration without requiring an explicit setup command. This meets the install-control-surface b...

The automatic global installation and use of third-party AI credential tooling is a concrete, unconsented install-time control-surface mutation. It meets the blocking policy for postinsta...