npm AI-agent policy reports, with evidence.

The automatic lifecycle hook broadly mutates foreign AI-agent configuration and registers a Codex plugin. That concrete install-time control-surface change meets the publish-block policy...

The automatic hook broadly modifies a foreign project's Claude configuration and agent instructions, including an MCP auto-approval rule. The hardcoded remote posting instruction makes th...

The source establishes an automatic lifecycle chain that writes package-authored instructions into global Codex and Claude control files. Although no exfiltration or remote payload execut...

The package performs unconsented postinstall execution of an opaque executable specifically to install agent hooks. That is a foreign AI-agent control-surface mutation chain, made riskier...

The automatic postinstall chain mutates detected third-party AI-agent skill directories, including Claude Code and Codex locations. This is unconsented broad AI-agent control-surface modi...

The automatic postinstall hook modifies Cursor's skills and MCP server configuration without a user-invoked setup action. This meets the policy for malicious install-hook abuse despite in...

This is a concrete automatic install-hook chain that alters shared Claude Code settings and captures broad agent events. Its guards and local-only default do not remove the unconsented po...

The automatic lifecycle hook modifies a foreign agent-extension source file. Its narrow scope lowers uncertainty about behavior but does not establish user consent for the install-time mu...

The automatic postinstall chain writes broad consumer-project agent configuration and registers executable lifecycle behavior. This meets the install-control-surface blocking policy even...

This is concrete, automatic postinstall mutation of foreign AI-agent configuration and behavior. The local-install and overwrite guards do not remove the unconsented global-install attack...

The automatic postinstall hook broadly mutates foreign AI-agent control surfaces and the user Python environment. This meets the install-hook abuse blocking policy even without confirmed...

The package has a concrete automatic postinstall chain that broadly modifies agent home configuration and installs persistent event hooks. The global-only guard does not provide user cons...

The package has a concrete automatic postinstall chain that defaults to and overwrites consumer AI-agent control files. This meets the install-control-surface blocking policy.

The package performs automatic postinstall mutation of user-level Claude agent configuration and installs skills, then registers a command that resolves amicus@latest. This meets the inst...

The automatic postinstall globally registers package-authored AI-agent instructions and mutates global agent skill directories. This is a concrete unconsented broad AI-agent control-surfa...

This is concrete, unconsented postinstall mutation of broad consumer AI-agent control surfaces, not ordinary UI-library setup. The deferred npx MCP command compounds the supply-chain expo...

The automatic install hook modifies consumer configuration and agent control surfaces, then installs review-evasion and secret-exposure guidance. The absence of observed network exfiltrat...

The confirmed postinstall chain downloads and installs content into multiple global AI-agent instruction locations without an explicit user action. This meets the install-control-surface...

This is an automatic install-time mutation of broad, previously registered project AI-agent control surfaces, combined with background persistence. It meets the install-hook abuse blockin...

The automatic postinstall hook mutates several foreign AI-agent control surfaces and accepts remotely fetched instruction content. This meets the install-hook abuse blocking rule.

The automatic lifecycle hook modifies two unrelated user-level AI-agent skill locations and installs further dependencies. This meets the install-hook abuse policy for unconsented broad A...