npm AI-agent policy reports, with evidence.

The package performs unconsented postinstall mutation of user-level AI-agent configuration and installs a future-session command hook. This is a concrete install-hook abuse path even thou...

This is an automatic postinstall mutation of a foreign, machine-wide AI-agent configuration, which the policy requires blocking. The lack of network or credential theft does not remove th...

This is an unconsented postinstall mutation of broad third-party AI-agent control surfaces through an opaque native executable. The installer also accepts remotely downloaded executable c...

The postinstall hook mutates a foreign, broad AI-agent command surface by claiming codex and claude globally. The later launcher configures an unrestricted agent and redirects it to packa...

The automatic postinstall hook changes Claude Code skills in the consumer project and removes existing skill directories. This meets the install-time AI-agent control-surface abuse policy...

The package performs unconsented postinstall mutation of a foreign AI-agent control surface by importing Claude Code extensions. This is concrete install-hook abuse even though the inspec...

This package automatically overwrites skills across three agent ecosystems during installation. That is concrete install-hook abuse even though the installer itself has no network or cred...

This is an unconsented postinstall execution chain that installs AI-agent hooks through an opaque native binary. The visible source provides no bounded list of affected settings or integr...

This is concrete unconsented postinstall mutation of a foreign AI-agent control surface. The lack of direct secret theft does not neutralize the install-hook abuse.

The package performs unconsented postinstall mutation of existing workspace and agent MCP control surfaces. That is a concrete install-hook abuse path even though the reviewed code did no...

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces, including a future remote package execution path. The absence of observed secret theft does not remov...

This is unconsented postinstall mutation of a broad, foreign AI-agent control surface. No data theft was confirmed, but the automatic persistent agent-control changes meet the publish-blo...

This is an automatic postinstall path that invokes an opaque native binary to reconcile AI-client hooks and state. That is a concrete unconsented lifecycle mutation of a foreign AI-agent...

This package automatically mutates a foreign AI-agent control surface during postinstall and supplies a launcher that enables unrestricted permissions and changes user agent configuration...

The automatic postinstall hook silently delegates to an opaque native binary to modify several foreign coding-agent skill directories. This meets the install-control-surface block policy.

This is an automatic postinstall mutation of multiple pre-existing project AI-agent control surfaces. Although no exfiltration or network activity was found, the behavior meets the blocki...

The package combines an automatic install hook with persistent PATH shadowing of Claude and Codex, scheduled execution, and automated self-reinstallation. This is a concrete broad AI-agen...

The automatic postinstall hook performs unconsented writes to foreign and broad AI-agent control surfaces. This meets the install-control-surface block policy even though no install-time...

This is concrete unconsented postinstall mutation of multiple foreign AI-agent configuration surfaces, coupled to package-controlled command execution and dependency patching. Safeguards...

This is an unconsented postinstall mutation of broad foreign AI-agent control surfaces. Checksum verification reduces tampering risk for the downloaded binary but does not establish conse...

The package performs an unconsented postinstall global installation of another AI-agent CLI. That concrete lifecycle mutation warrants blocking even though no credential theft was found i...