npm AI-agent policy reports, with evidence.

The lifecycle path performs automatic, persistent consumer-project mutation and project-scoped agent plugin installation. This exceeds first-party package-owned extension setup and meets...

The package automatically alters a third-party AI SDK OAuth callback page during installation. This is concrete install-hook abuse of a foreign authentication-related control surface, des...

The package has a concrete postinstall path that mutates consumer AI-agent configuration and installs third-party agent capabilities. This meets the blocking policy for unconsented lifecy...

The package has a concrete automatic postinstall chain that overwrites skill directories for multiple unrelated agent products. The global-install guard and lack of network activity do no...

The package uses postinstall to write instructions into multiple foreign AI-agent skill directories, rather than requiring an explicit user setup action. This meets the install-time AI-ag...

This is an unconsented postinstall mutation of the broad Claude and Codex command surface, with persistence and a hard-coded remote token-sync destination. The readable source confirms th...

The automatic postinstall mutation of a third-party AI-agent adapter is a concrete unconsented control-surface change. Its narrow and readable implementation reduces ambiguity but does no...

The inspected source establishes automatic, non-user-invoked mutation of both consumer project and user AI-agent control surfaces. This meets the blocking boundary for a postinstall hook...

The automatic lifecycle hook broadly mutates consumer and machine-level AI-agent configuration, including an executable pre-tool hook. This meets the install-control-surface blocking poli...

The package automatically modifies a foreign user-wide AI-agent configuration and enables remote collection of sensitive Claude interaction content. This concrete install-time control-sur...

This is an automatic postinstall mutation of broad, foreign Claude and Codex command control surfaces, with persistence and automatic updating. The global-install guard does not provide s...

The package combines an automatic global postinstall hook with broad third-party MCP configuration writes and a remote, unpinned executable delivery path. The global-only guard and opt-ou...

The lifecycle hook automatically replaces a foreign AI-agent executable with opaque bundled binaries. Backups and hash checks do not remove the install-time control-surface takeover.

The postinstall hook automatically installs command hooks into the user's Copilot configuration and persists shell-profile code. This is a concrete unconsented mutation of foreign AI-agen...

The package performs an unconsented postinstall write to a generic consumer-project AGENTS control surface and injects AI-agent instructions. This meets the install-control-surface blocki...

The automatic postinstall hook writes package-controlled content into the global Claude Code skills directory. That concrete lifecycle-based agent control-surface mutation meets the publi...

The automatic lifecycle hook performs remote content retrieval and broad global AI-agent configuration writes. That is concrete unconsented install-time control-surface mutation.

The package performs unconsented postinstall mutation of the user's Claude command area and automatic MCP registration. Those actions constitute a concrete install-time AI-agent control-s...

This is an automatic install-time path that invokes opaque native code to configure Codex and Claude hooks, rather than an explicit user setup action. The visible source establishes a bro...

The package performs automatic postinstall mutation of both Codex and Claude global skill directories and installs Python dependencies into the user environment. This meets the install-co...

This is an unconsented postinstall mutation of a foreign, global AI-agent control surface. The binary-presence guard does not remove the automatic configuration change.