npm AI-agent policy reports, with evidence.

The package uses an automatic lifecycle hook to globally install a separate AI-agent package, then retries the behavior at runtime. This meets the install-control-surface blocking boundar...

This is an unconsented postinstall mutation of a foreign AI-agent control surface. The source establishes concrete persistent configuration writes, so it meets the blocking policy despite...

The package automatically modifies consumer-project AI-agent configuration through postinstall. The local-only implementation does not remove the concrete control-surface hijack.

The automatic lifecycle hook overwrites skills in several unrelated agent environments, including Codex and Claude. This is concrete install-hook abuse even though the hook does not make...

This is a concrete postinstall mutation of foreign AI-agent control surfaces, followed by an automatic package-install path. The behavior meets the install-hook abuse blocking policy desp...

This is an unconsented postinstall mutation of broad AI-agent control surfaces in the consumer project. The lack of network theft does not remove the concrete install-time control-hijack...

This is an unconsented postinstall mutation path for a foreign AI-agent control surface, backed by a native payload containing an explicit safety-bypass command. The remote download path...

This is unconsented postinstall execution that installs AI-agent hooks through an opaque native binary, with a remote-download fallback. It meets the install-control-surface block criterion.

The automatic postinstall performs broad cross-vendor AI-agent control-surface writes and configuration changes. This meets the install-hook abuse blocking boundary despite the absence of...

The package has a concrete postinstall path that automatically persists integrations across three AI-agent environments on global installation. This meets the install-hook abuse policy ev...

This is an unconsented postinstall mutation of broad AI-agent control surfaces, preceded by automatic executable acquisition and execution. It meets the install-control-surface block poli...

The package uses an automatic npm lifecycle hook to copy package-controlled skill content into shared and third-party AI-agent directories. This meets the install-time AI-agent control-su...

This is an automatic postinstall mutation of user-level Claude configuration that establishes ongoing command execution. The behavior meets the install-control-surface block policy despit...

The inspected source establishes an automatic npm lifecycle chain that writes third-party agent configuration and rules, producing persistent automatic package execution. This meets the i...

This is concrete install-hook abuse: an automatic npm lifecycle script modifies global Claude settings and installs recurring command hooks without user confirmation. The absence of netwo...

The package performs unconsented postinstall mutation of user-level AI-agent configuration and installs a future-session command hook. This is a concrete install-hook abuse path even thou...

This is an automatic postinstall mutation of a foreign, machine-wide AI-agent configuration, which the policy requires blocking. The lack of network or credential theft does not remove th...

This is an unconsented postinstall mutation of broad third-party AI-agent control surfaces through an opaque native executable. The installer also accepts remotely downloaded executable c...

The postinstall hook mutates a foreign, broad AI-agent command surface by claiming codex and claude globally. The later launcher configures an unrestricted agent and redirects it to packa...

The automatic postinstall hook changes Claude Code skills in the consumer project and removes existing skill directories. This meets the install-time AI-agent control-surface abuse policy...

The package performs unconsented postinstall mutation of a foreign AI-agent control surface by importing Claude Code extensions. This is concrete install-hook abuse even though the inspec...