npm AI-agent policy reports, with evidence.

The source establishes an automatic postinstall chain that mutates foreign consumer projects and persists itself in their lifecycle configuration. This meets the blocking policy for uncon...

The package performs automatic postinstall mutation of a user-level Claude SessionStart control surface, creating recurring agent-session execution. This meets the install-hook abuse bloc...

The package performs unconsented postinstall mutation of a user-level AI-agent control surface and establishes future command execution. This meets the install-hook abuse blocking policy...

The package contains a concrete automatic postinstall chain that changes global AI-agent configuration and installs a command hook for future sessions. No exfiltration was found, but the...

The postinstall hook mutates both global agent skill directories and installs user-level dependencies without a user-invoked setup action. This meets the install-hook abuse boundary even...

This is an unconsented postinstall mutation of a broad AI-agent control surface, with package-authored instructions registered for future use. It meets the install-control-surface block p...

The package's automatic postinstall modifies global AI-agent configuration and establishes future command execution through Claude's SessionStart hook. This meets the install-hook abuse p...

The automatic postinstall hook writes a foreign, user-wide AI-agent control surface and configures future command execution. Although no exfiltration or network behavior was found, this i...

The automatic postinstall execution of an unverified native payload to alter Codex and Claude Code integrations is a concrete install-time AI-agent control-surface attack. The absence of...

The postinstall hook automatically mutates a foreign global AI-agent environment by installing opencode-ai. This is an unconsented install-time AI control-surface change, so it meets the...

This package performs unconsented postinstall modification of multiple foreign AI-agent control surfaces and installs an unpinned remote MCP command. That is concrete install-hook abuse u...

This is an unconsented postinstall mutation of a broad AI-agent control surface, with automatic third-party command setup and credential forwarding. The global-install gate does not estab...

Static inspection confirms an automatic lifecycle path that modifies global Codex trust and hook configuration based on the presence of Codex state. This creates persistent package-contro...

The automatic postinstall hook performs broad persistent mutations and installs a third-party AI-agent executable without an explicit user command. This meets the install-time foreign AI-...

The automatic postinstall chain force-installs package-controlled skills into multiple foreign global AI-agent directories. This is unconsented lifecycle-based control-surface mutation.

The package uses postinstall to execute an opaque native installer that configures AI-agent hooks and includes a Codex setting mutation marker. This is a concrete unconsented lifecycle co...

This is an unconsented postinstall mutation of broad AI-agent control surfaces, with remote npx execution and deliberate obfuscation. It meets the install-hook abuse block boundary.

This is an unconsented install-time mutation of a broad AI-agent control surface through a remote, latest-version installer. The lifecycle implementation is also deliberately obfuscated.

This is an unconsented postinstall mutation of a foreign, broad AI-agent control surface. The lifecycle script silently installs unrestricted command hooks, which meets the install-hook a...

The package has a concrete automatic postinstall path that mutates foreign global AI-agent control surfaces. This meets the install-hook abuse blocking boundary despite the absence of dir...

This is an unconsented postinstall mutation of broad, pre-existing AI-agent control surfaces. The conditional checks and opt-outs do not establish user consent.