npm AI-agent policy reports, with evidence.

postinstall copies and prunes a skill tree into Codex and Claude user skill directories, which is unconsented mutation of foreign AI-agent control surfaces. README wording and opt-in skil...

The automatic postinstall chain fetches and executes an opaque native payload, then targets pre-existing Claude or Codex configuration through install-hooks --all. This is a concrete unco...

postinstall writes a bundled agent skill into ~/.codex/skills and ~/.claude/skills, which is unconsented mutation of foreign AI-agent control surfaces. That matches a blocking install-tim...

The postinstall hook writes FocalAPI skills into many third-party agent skill directories under the user home without a separate user command. That is unconsented install-time mutation of...

The postinstall hook writes a packaged skill into Codex and Claude user skill directories without a user command, which is unconsented mutation of foreign AI-agent control surfaces. READM...

The automatic postinstall hook broadly modifies global AI-agent configurations, which meets the install-control-surface blocking policy. The accompanying remote binary download increases...

The postinstall hook unconditionally deploys package-controlled, high-capability AI-agent profiles into a global user configuration directory. This is concrete unconsented install-time mu...

The automatic postinstall hook installs privileged package-authored agents into a foreign shared AI-agent configuration directory. This meets the blocking policy for unconsented lifecycle...

The automatic postinstall rewrites Claude Code and Codex global MCP configs to launch this package's server, which is unconsented foreign agent-control mutation. Scanner similarity to a p...

postinstall mutates Claude Code user settings and turns on remote logging of prompts, replies, and tool details. That is unconsented install-time hijack of a foreign agent control surface...

Automatic postinstall rewrites the consumer's Claude Code user settings and enables remote logging of prompts, replies, and tool details. That is unconsented mutation of a foreign AI-agen...

This is an unconsented postinstall mutation of a broad AI-agent control surface that enables external collection of sensitive Claude session content. The automatic global configuration ma...

postinstall copies this skill into Claude, Gemini, Codex, and Antigravity skill directories and, for Claude Code, injects a machine-wide SessionStart hook into user-level settings.json wi...

The postinstall hook copies Claude Code skills into a consumer project's .claude/skills directory without an explicit setup command, which is unconsented mutation of a foreign AI-agent co...

The postinstall hook copies skills and agents into consumer .claude and .agents paths and writes Copilot instruction and hook files, which is unconsented mutation of foreign AI-agent cont...

The package performs the policy-defined malicious chain: automatic postinstall mutation of foreign AI-agent controls plus detached persistence. Its stated safety purpose does not establis...

This is an unconsented postinstall mutation of a consumer AI-agent control surface, including recursive deletion of existing configuration. The lifecycle behavior meets the install-hook a...

The postinstall hook mutates Claude Code's user settings file and turns on remote logging of prompts and replies without consent. That is unconsented install-time hijack of a broad agent...

postinstall rewrites user-global Claude Code settings and enables prompt, reply, and tool telemetry to otel.togaiq.com, including on installs that never open a project. That is unconsente...

Source shows an automatic postinstall that mutates Claude Code and Codex control-plane files, which is unconsented foreign agent-surface hijack. The MCP payload is first-party, but that d...

The npm postinstall hook writes karajan-mcp into Claude Code and Codex user configs without consent. That is unconsented mutation of a foreign AI-agent control surface, so the package is...