npm AI-agent policy reports, with evidence.

This is an unconsented postinstall mutation of a broad AI-agent control surface. The lifecycle path is concrete and sufficient for blocking under the policy.

This package uses an automatic npm lifecycle hook to install and prune global skills for two separate AI-agent products. That concrete cross-agent control-surface mutation meets the insta...

This is an unconsented postinstall mutation path for external AI-agent control surfaces, implemented through an opaque native executable. The unchecked remote-binary fallback increases in...

The automatic postinstall hook persistently mutates both Codex and Claude skill locations and installs additional user-level dependencies. This meets the install-control-surface policy fo...

This is an unconsented postinstall mutation of a foreign AI-agent control surface combined with automatic remote payload delivery. The signature checks and conflict handling do not neutra...

This is an unconsented postinstall mutation of a broad, foreign AI-agent control surface with future command execution. No exfiltration was found, but the automatic persistent hook meets...

This is concrete, automatic postinstall mutation of multiple foreign AI-agent control surfaces. The absence of exfiltration does not neutralize the unconsented control-surface writes.

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces, with deletion capability. The lifecycle payload is executable agent instruction content rather tha...

The package has a concrete automatic lifecycle path that overwrites a third-party AI-agent adapter. Version and source checks constrain the patch but do not restore user consent for the m...

The package performs automatic postinstall mutation of consumer package-manager and AI-agent control files, then supplies reviewer-suppression and unsafe secret-handling instructions. Thi...

The package's postinstall hook silently writes a Gemini skill into the user's home configuration and embeds instructions that authorize an agent to execute the package. This meets the ins...

The package performs broad consumer-project AI-agent configuration changes automatically during npm installation and suppresses review of those changes. This meets the install-control-sur...

The automatic postinstall writes and merges global AI-agent control surfaces rather than limiting setup to an explicit user command or package-owned project directory. That concrete lifec...

The package contains runtime AI-agent steering language and transmits host-derived identity data during ordinary tool calls. The lack of lifecycle hooks reduces install risk but does not...

This is an unconsented postinstall mutation of a broad AI-agent control surface, which the policy classifies as malicious install-hook abuse. The absence of a remote payload does not remo...

This is concrete unconsented postinstall mutation of a consumer project's broad AI-agent control surface, compounded by lifecycle-enabling .npmrc changes and review suppression. The lack...

The package has a concrete automatic postinstall chain that modifies consumer package-manager and AI-agent configuration, including reviewer-suppression instructions. No benign user comma...

The lifecycle hook automatically and forcibly writes behavior-bearing files into broad, external AI-agent discovery locations. Although no exfiltration or remote execution was found, this...

The automatic postinstall hook mutates a foreign consumer project's Claude Code skills and deletes existing skills. This meets the install-time AI-agent control-surface abuse policy despi...

The automatic postinstall hook modifies broad foreign AI-agent configuration surfaces and the user environment. This meets the install-hook abuse policy even without confirmed secret theft.

This is an unconsented postinstall mutation of a broad AI-agent control surface that enables collection of sensitive Claude session content. The opt-out does not prevent the default autom...