npm AI-agent policy reports, with evidence.

This is concrete automatic mutation of a foreign AI-agent control surface, including forced plugin enablement and registry-path redirection. The scope checks do not remove the unconsented...

The automatic postinstall hook modifies three user-level AI-agent skill locations and forcibly replaces their contents. The opt-out flag does not establish consent for the default install...

The automatic postinstall hook mutates multiple foreign AI-agent skill locations, which meets the install-control-surface blocking policy. No JavaScript exfiltration was found, but it is...

This is an unconsented postinstall mutation of a consumer AI-agent control surface, compounded by opaque configuration code and unrelated dependency rewrites. Opt-out variables and the gl...

The automatic lifecycle hook modifies consumer configuration and injects AI instructions that promote secret disclosure while suppressing review. The reviewer-directed text is social engi...

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces, combined with automatic user-environment dependency installation. The behavior meets the install-hook...

The automatic postinstall hook mutates and deletes project-level Claude Code skills. This meets the policy definition of unconsented install-time mutation of a foreign AI-agent control su...

The automatic postinstall chain persistently alters multiple third-party AI-client configurations to launch this package. This meets the policy for unconsented broad AI-agent control-surf...

The package uses an automatic lifecycle hook to globally install a separate AI-agent package, then retries the behavior at runtime. This meets the install-control-surface blocking boundar...

This is an unconsented postinstall mutation of a foreign AI-agent control surface. The source establishes concrete persistent configuration writes, so it meets the blocking policy despite...

The package automatically modifies consumer-project AI-agent configuration through postinstall. The local-only implementation does not remove the concrete control-surface hijack.

The automatic lifecycle hook overwrites skills in several unrelated agent environments, including Codex and Claude. This is concrete install-hook abuse even though the hook does not make...

This is a concrete postinstall mutation of foreign AI-agent control surfaces, followed by an automatic package-install path. The behavior meets the install-hook abuse blocking policy desp...

This is an unconsented postinstall mutation of broad AI-agent control surfaces in the consumer project. The lack of network theft does not remove the concrete install-time control-hijack...

This is an unconsented postinstall mutation path for a foreign AI-agent control surface, backed by a native payload containing an explicit safety-bypass command. The remote download path...

This is unconsented postinstall execution that installs AI-agent hooks through an opaque native binary, with a remote-download fallback. It meets the install-control-surface block criterion.

The automatic postinstall performs broad cross-vendor AI-agent control-surface writes and configuration changes. This meets the install-hook abuse blocking boundary despite the absence of...

The package has a concrete postinstall path that automatically persists integrations across three AI-agent environments on global installation. This meets the install-hook abuse policy ev...

This is an unconsented postinstall mutation of broad AI-agent control surfaces, preceded by automatic executable acquisition and execution. It meets the install-control-surface block poli...

The package uses an automatic npm lifecycle hook to copy package-controlled skill content into shared and third-party AI-agent directories. This meets the install-time AI-agent control-su...

This is an automatic postinstall mutation of user-level Claude configuration that establishes ongoing command execution. The behavior meets the install-control-surface block policy despit...