npm AI-agent policy reports, with evidence.

The package's postinstall path automatically executes an opaque native hook installer, including after downloading an unverified executable. This is a concrete unconsented AI-agent contro...

Source inspection confirms automatic postinstall registration of a foreign Claude Chrome MCP bridge, which is a broad AI-agent control-surface mutation. The unchecked remote binary downlo...

postinstall launches a native --install-agent-hooks installer that README describes as writing Codex and Claude Code hooks, skills, and a Codex setting. That is unconsented install-time m...

Source shows an automatic postinstall that writes this package's skills into many third-party agent skill directories, which is unconsented mutation of a foreign and broad AI-agent contro...

This is a concrete automatic install-time AI control-surface hijack with subsequent disclosure of application LLM content. The behavior meets the publish-block policy regardless of the pa...

Automatic postinstall execution of a native binary with --install-agent-hooks, together with the package's own statement that this writes Codex and Claude Code hooks and skills, is uncons...

The package uses a registry-install lifecycle hook to alter two unrelated user-level agent configurations and install dependencies. This meets the policy threshold for malicious install-t...

The postinstall hook establishes or replaces skills across unrelated AI-agent products without an explicit user setup action. This meets the install-time foreign/broad AI-agent control-su...

The postinstall script rewrites OpenClaw's user config to allowlist this plugin, which is unconsented mutation of a foreign agent control surface. Workspace upload to api.xmem.space is th...

The postinstall hook writes this package's skill into Claude Code, Codex, and cc-switch skill directories without an explicit user setup command, which is unconsented mutation of foreign...

Postinstall automatically writes behavior-bearing Claude Code skills into the consumer project's .claude/skills directory, which is unconsented mutation of a foreign AI-agent control surf...

Automatic postinstall writes behavior-bearing files into the consumer's .claude/skills/ directory, which is a foreign Claude Code control surface. That matches unconsented install-time ag...

postinstall in package.json runs scripts/install.js, which fetches a native binary and then, when ~/.claude or ~/.codex already exists, executes install-hooks --all with no opt-in prompt....

The postinstall hook mutates the consumer OpenCode control surface and then applies a remote signed bundle onto the same paths. That is unconsented install-time hijack of a foreign AI-age...

postinstall automatically executes an opaque binary that writes Claude Code user config and registers global hooks, which is unconsented mutation of a foreign AI-agent control surface. Sc...

Postinstall writes a first-party skill into many foreign AI-agent skill directories under the user home, which is unconsented mutation of a broad agent control surface. README claims of a...

postinstall copies or downloads a native binary and runs --install-agent-hooks, and the README states this writes Codex and Claude Code hooks, skills, and a Codex setting. That is unconse...

Automatic postinstall writes a skill file into multiple foreign global AI-agent directories, which matches unconsented install-time agent control-surface hijack. The GitHub binary downloa...

The postinstall hook downloads a native binary and non-interactively runs arkcli +connect --refresh to auto-detect local agents and install skills into them. That is unconsented install-t...

The postinstall script writes into ~/.codex/skills and ~/.claude/skills, which is unconsented install-time mutation of foreign AI-agent control surfaces. That matches a publish block even...

The postinstall script executes a native binary with --install-agent-hooks and the package text states that this writes Codex and Claude Code hooks, skills, and Codex settings. That is un...