npm AI-agent policy reports, with evidence.

The package has a concrete automatic postinstall chain that replaces skill content in Claude Code, generic agent, and Codex directories. This meets the install-time AI-agent control-surfa...

The automatic postinstall hook broadly mutates foreign AI-agent skill and plugin control surfaces, including enabling and installing a Codex plugin. This is concrete unconsented install-h...

The automatic lifecycle changes consumer package-manager behavior and writes AI-agent instructions, skills, and review exclusions into the project. These actions are concrete control-surf...

The automatic postinstall hook mutates a broad AI-agent control surface by signaling matching external PM2 processes. Its global-install guard and opt-out do not establish consent for eac...

This is an unconsented install-time mutation of foreign AI-agent control surfaces, compounded by automatic user-level pip installation. The behavior meets the install-hook abuse blocking...

Source inspection confirms an automatic postinstall that writes a wildcard Claude Code hook into the consuming project. This meets the policy threshold for malicious install-hook abuse re...

The global postinstall path automatically modifies multiple AI-agent instruction surfaces and enables Codex network access. The remote-authority instruction makes the resulting control pa...

The package has a concrete automatic postinstall chain that modifies foreign AI-agent configuration and installs command-controlling hooks. This meets the install-control-surface blocking...

The automatic lifecycle hook broadly mutates foreign AI-agent control surfaces and replaces existing extension content. This meets the install-control-surface blocking rule despite the av...

The package performs automatic postinstall execution of an opaque native binary specifically to install hooks for multiple AI agents. This is a concrete unconsented AI-agent control-surfa...

The postinstall hook automatically mutates a browser agent-control surface by registering native hosts and launchers. This meets the install-time control-surface blocking policy despite t...

The automatic lifecycle hook modifies a global Cursor instruction directory and activates installed instructions globally. This satisfies the install-hook policy for a broad AI-agent cont...

The package has a concrete automatic lifecycle path that overwrites a foreign, broad AI-agent control surface. Although no exfiltration was found, this satisfies the install-time agent-co...

The concrete postinstall write to the consumer's CLAUDE.md meets the policy for unconsented mutation of a foreign AI-agent control surface. The absence of observed network or credential b...

This is an unconsented postinstall mutation of a foreign AI-agent control surface. The lifecycle hook overwrites consumer skill directories, meeting the blocking policy even without obser...

The package contains a postinstall hook that mutates multiple AI-agent host configurations during global installation. This meets the policy definition of unconsented lifecycle mutation o...

This is concrete unconsented postinstall mutation of foreign AI-agent configuration, not merely an explicit setup command. The downstream npx MCP command further expands the supply-chain...

The automatic postinstall broadly mutates foreign AI-agent control surfaces and invokes an automatic upgrade path. This is concrete install-hook abuse, not a user-invoked or package-owned...

The package has a concrete automatic install hook that modifies a foreign AI-agent SDK. Its narrow Windows scope reduces impact but does not establish user consent for the mutation.

The automatic postinstall writes package-controlled content into the global Claude skills control surface, meeting the install-hook abuse boundary. The remote-login cookie transfer adds a...

The postinstall lifecycle performs unconsented mutation of foreign and broad AI-agent control surfaces. This meets the install-hook abuse blocking boundary despite skipping paths where no...