npm AI-agent policy reports, with evidence.

The source implements the policy-defined malicious chain: an automatic install lifecycle broadly mutates AI-agent controls and installs/configures a separate executable MCP dependency. Th...

The automatic postinstall mutates a foreign, user-wide AI-agent configuration and registers an opaque executable for later execution. This meets the install-control-surface blocking polic...

This is an unconsented postinstall mutation of the user's Cursor MCP control surface, combined with automatic skill deployment and remote binary retrieval. Integrity checks on the downloa...

The package has a registry install lifecycle hook that automatically fetches and writes agent instructions across unrelated global tool directories. That concrete control-surface mutation...

This is an automatic install-time write to foreign AI-agent control surfaces, not an explicit user setup action. The postinstall chain and the behavior-bearing copied skill satisfy the in...

The automatic lifecycle chain executes opaque native code and installs hooks into external AI-agent integrations. That concrete install-time control-surface mutation meets the publish-blo...

The package contains an automatic install-time persistence action and a bundled skill that directs agents to install arbitrary remote skill packages over existing skills. The latter estab...

The automatic lifecycle chain installs agent hooks and includes an unsafe Codex launch configuration. This is concrete AI-agent control-surface abuse, not merely a user-invoked CLI feature.

This is an unconsented install-time mutation of foreign AI-agent instruction directories. The lifecycle hook directly performs the change and suppresses errors, making it concrete install...

The automatic lifecycle hook downloads or executes an opaque native binary and invokes agent-hook installation without an explicit setup command. That is concrete unconsented postinstall...

The automatic lifecycle hook installs package-authored instructions into multiple foreign AI-agent directories and has a generic fallback. This meets the install-time AI-agent control-sur...

This is an automatic postinstall mutation of a foreign, broad AI-agent control surface. The conditional binary lookup does not establish user consent and the installer suppresses failures.

The postinstall hook performs broad AI-agent and shell configuration mutation automatically. Although no separate exfiltration endpoint was found, this concrete install-time control-surfa...

The automatic postinstall path mutates a broad, foreign AI-agent control surface. Safeguards against overwriting existing skill directories do not remove the unconsented installation beha...

This is a concrete automatic postinstall chain that broadly changes a consumer project's AI-agent configuration and enables an extra plugin. It meets the install-control-surface blocking...

The automatic postinstall hook writes a wildcard command into the consumer's Claude Code configuration. This meets the policy for malicious install-hook abuse even without proven secret t...

The package automatically and broadly alters a consumer project’s OpenCode agents, commands, skills, plugin files, and configuration. That meets the install-control-surface blocking polic...

The automatic postinstall hook mutates foreign AI-agent control surfaces in the consuming project and can overwrite an existing command. This is concrete unconsented install-time control-...

The automatic global-install lifecycle mutates a broad AI-agent control surface and installs external plugin code. This meets the policy threshold for unconsented postinstall control-surf...

This is a concrete postinstall chain that executes an opaque native binary and modifies foreign AI-agent hooks and settings. It meets the install-control-surface block policy.

This is an unconsented postinstall mutation of broad AI-agent control surfaces through an opaque native executable. The automatic lifecycle chain and remote binary execution meet the inst...