npm AI-agent policy reports, with evidence.

The install hook unconditionally plants skills in Claude's home config and, when other agent directories exist, writes those control surfaces too, including enabling a Codex plugin and MC...

Unconsented postinstall rewrites the user-wide Claude Code control file and turns on prompt and tool export to a package-controlled collector. A later explicit CLI install does not author...

postinstall unconditionally installs skills into a wide set of home AI-agent directories, which is unconsented mutation of a foreign and broad agent control surface. The JavaScript shows...

The install lifecycle unconditionally launches a binary whose documented job is to modify Codex and Claude Code hooks, skills, and a Codex setting. That is unconsented postinstall mutatio...

The package automatically configures global Claude telemetry for an operator endpoint and enables collection of prompts and tool details. This satisfies the install-time foreign AI-agent...

The package has a concrete automatic postinstall path that broadly mutates foreign AI-agent skill directories. This meets the install-control-surface blocking policy.

The automatic postinstall hook modifies unoccupied global AI-agent command names, creating a concrete command-control hijack surface. Its guards reduce scope but do not provide prior cons...

The automatic postinstall hook mutates broad user-level Codex and Claude skill locations and can delete destination content. This is concrete install-hook abuse under the stated policy.

The automatic lifecycle hook mutates consumer package-manager configuration and AI-agent control files, then installs instructions designed to prevent review of those files. This is concr...

The package uses an automatic postinstall hook to mutate a global AI-agent plugin control surface. This is concrete unconsented persistence into OpenCode configuration, so it meets the in...

The automatic lifecycle hook performs broad global AI-agent configuration mutation, including AGENTS.md, plugins, agents, commands, and skills. This is concrete unconsented control-surfac...

The postinstall hook performs cross-product AI-agent skill deployment into home-directory control surfaces. This meets the blocking policy for unconsented install-time mutation of a forei...

The automatic lifecycle hook force-writes skills to foreign and broad AI-agent control surfaces. This is concrete install-time control-surface hijacking.

The automatic postinstall hook performs broad global AI-agent configuration writes. This meets the install-control-surface blocking condition even though the installer itself contains no...

The postinstall hook automatically modifies a foreign global AI-agent configuration and enables export of sensitive interaction telemetry. This is concrete install-hook abuse under the st...

The automatic lifecycle hook performs a concrete source rewrite of a foreign AI-agent dependency. Under the install-control-surface policy, that unconsented postinstall mutation is block-...

The package performs unconsented postinstall mutation of a consumer project's AI-agent instruction surfaces and reinforces it by enabling lifecycle execution. Reviewer-directed suppressio...

The automatic postinstall hook mutates both Codex and Claude user skill directories and can recursively delete installed content. This concrete install-time control-surface modification m...

The automatic postinstall hook performs broad, foreign AI-agent configuration mutation and installs an additional global package. This is a concrete install-time control-surface attack un...

The automatic lifecycle chain installs and enables package-controlled AI-agent hooks outside the package and consumer project configuration. This meets the blocking policy for unconsented...

The automatic postinstall hook performs broad global AI-agent skill installation and deletion rather than limiting setup to an explicit user action. This meets the install-control-surface...