npm AI-agent policy reports, with evidence.

The package uses an automatic install hook to socially engineer an AI agent into a follow-on setup flow that persists commands and instructions in global agent configuration. This is a co...

This is an unconsented postinstall path into an opaque native installer that carries assistant-skill installation content. It meets the policy for malicious install-hook abuse of a broad...

The automatic postinstall hook persistently mutates a foreign, broad AI-agent instruction surface. This meets the install-control-surface blocking policy regardless of the otherwise packa...

The automatic postinstall persists executable code into the user's global Claude Code settings rather than limiting setup to an explicit command or package-owned project directory. This m...

The automatic postinstall hook performs unconsented global installation of a foreign AI-agent CLI and persistent user-environment mutation. This is concrete install-hook abuse even though...

The package's automatic lifecycle hook persistently installs a wildcard Claude Code command hook in the consumer project. This meets the policy threshold for malicious install-hook abuse.

This is an unconsented postinstall path that downloads and executes opaque code to register across available agent harnesses and start a background process. Checksum verification limits r...

The automatic postinstall performs a concrete, in-place mutation of a foreign AI-agent host package. Anchor checks and backups do not establish consent for that lifecycle-time control-sur...

This is an unconsented postinstall mutation of foreign, broad AI-agent control surfaces, combined with automatic user-wide dependency installation. That satisfies the install-control-surf...

This is unconsented postinstall mutation of a broad third-party AI-agent control surface. The automatic hook registration establishes persistent execution, so it meets the publish-block p...

The automatic lifecycle hook forcibly changes project-level Claude behavior, which is concrete install-hook abuse under the policy. No separate exfiltration is required for this blocking...

The automatic postinstall hook writes to user-wide OpenCode configuration and enables this plugin without an explicit setup action. That matches the policy's publish-block condition for u...

The package uses postinstall to replace and rewrite third-party installed dependencies and delete their source maps. This is a concrete install-hook abuse chain even though no separate ex...

This is an automatic postinstall mutation of a broad, foreign AI-agent control surface, not an explicit user setup action. The persistent hooks and global instruction file establish concr...

The automatic lifecycle chain performs unconsented global AI-agent MCP registration. This is concrete install-hook abuse even though no secret theft or network exfiltration was found in t...

The package performs concrete, automatic postinstall writes to multiple global AI-agent control surfaces. That behavior meets the install-hook abuse blocking policy regardless of the abse...

Automatic installation mutates a broad AI-agent control surface to export sensitive interaction telemetry. This is concrete unconsented install-hook abuse.

The automatic lifecycle hook performs persistent, user-wide AI-agent configuration and shell-profile mutation. This meets the install-control-surface blocking policy even though the inspe...

This is concrete unconsented postinstall mutation of a broad Claude Code control surface, not merely an explicit user setup command. The package also reads Claude Code transcripts during...

The automatic lifecycle hook makes broad AI-agent instruction changes, including recursive replacement of existing skill directories. This meets the install-time foreign control-surface m...

The automatic global postinstall changes Codex and Claude control surfaces, including a default Codex agent, and a self-updater repeats the lifecycle path. Local-install safeguards and no...