npm AI-agent policy reports, with evidence.

The automatic postinstall hook mutates Claude Desktop configuration and establishes future package execution. This meets the policy for malicious install-hook abuse even though the config...

This is an unconsented install-time mutation of broad foreign AI-agent control surfaces, reinforced by persistence-oriented package-manager changes and review suppression. No network thef...

This is malicious under the install-control-surface policy because an automatic postinstall hook mutates a foreign user-level AI-agent configuration. The persistent registration is couple...

This is an automatic postinstall mutation of foreign AI-agent control surfaces, including destructive replacement of existing skill directories. The later skill resolver also performs pac...

The automatic lifecycle hook performs broad, unconsented mutation of consumer AI-agent control surfaces and adds command permissions. This meets the install-hook abuse blocking policy.

This is an unconsented postinstall mutation of foreign AI-agent configuration and skill directories. The automatic lifecycle chain is concrete and sufficient to block publication.

The postinstall hook deletes and replaces multiple AI-agent skill directories without a user command or consent. This meets the install-control-surface block condition even though no cred...

The automatic postinstall mutation of broad, foreign AI-agent control surfaces is concrete and unconsented. The code also deletes prior directories before writing replacement instruction...

The automatic postinstall path performs broad user-level AI-agent configuration mutation and destructive replacement without explicit user setup. This meets the install-hook abuse policy...

The automatic lifecycle chain modifies global AI-agent configuration locations across multiple platforms. This meets the install-control-surface policy for blocking.

This is unconsented postinstall mutation of a foreign AI-agent control surface, with a mounted plugin that accesses credentials and sends user content externally. The automatic lifecycle...

The postinstall hook broadly mutates foreign AI-agent skill directories and deploys a skill that can automatically install a CLI. This is a concrete unconsented control-surface modificati...

The package has a concrete postinstall chain that modifies DSH agent and web-plugin configuration without an explicit user command. The installed component can later use a local credentia...

The package performs default postinstall deletion and replacement across several foreign AI-agent skill locations. This concrete lifecycle behavior meets the install-hook abuse blocking p...

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The lack of observed exfiltration does not remove the concrete install-hook abuse.

The automatic postinstall hook deletes and replaces skills in Codex, Claude, and cc-switch directories. This is concrete install-hook abuse under the stated policy.

This is an unconsented postinstall mutation of broad AI-agent control surfaces, including automatically executed hook commands. The global-install guard does not establish consent for mod...

The package has a concrete automatic postinstall chain that mutates broad, foreign AI-agent control surfaces. This meets the install-hook abuse blocking policy.

This is an unconsented install-time mutation of a consumer AI-agent control surface followed by interception and remote transmission of application AI content. It meets the publish-block...

The lifecycle hook automatically mutates multiple foreign AI-agent skill roots. This concrete unconsented install-time control-surface write meets the publish-block policy.

The install hook silently rewrites a consumer application's AI module resolution and causes captured AI content to be uploaded. The explicit CLI does not remove the risk because the posti...