npm AI-agent policy reports, with evidence.

The automatic lifecycle hook performs concrete, persistent modifications to a consumer repository's AI-agent control surface and development configuration. Its scope checks do not establi...

The automatic lifecycle hook directly mutates existing third-party agent configuration and installs a package-controlled launcher. This is concrete unconsented install-hook abuse under th...

The global postinstall path automatically mutates Claude Code configuration and permissions. This meets the install-control-surface blocking policy despite safeguards against replacing an...

This is an unconsented postinstall mutation of both consumer-project and user-wide AI-agent control surfaces. The source establishes the behavior directly, so it warrants blocking despite...

The automatic postinstall hook mutates both Codex and Claude user skill directories, a broad foreign AI-agent control surface. This meets the install-hook abuse blocking policy even thoug...

This package automatically weakens multiple security controls in a foreign AI-agent dependency tree and deletes its sandbox components. That concrete install-time control-surface mutation...

This is an unconsented install-time mutation of foreign project and AI-agent control surfaces, with durable execution through host postinstall and Git configuration. The lack of observed...

The automatic postinstall chain modifies the consumer project and configures multiple AI-agent platforms without an explicit user command. This meets the install-control-surface block cri...

This is unconsented postinstall execution of an opaque remote binary that automatically modifies a broad AI-agent control surface on global installs. The checksum does not establish trust...

The package uses automatic postinstall execution to change a consumer's package lifecycle and install or remove AI-agent plugins. Those broad, persistent mutations meet the install-hook a...

The postinstall hook automatically weakens authentication and credential protection in foreign AI-agent packages while removing sandbox dependencies. This meets the policy for malicious i...

This is a concrete automatic lifecycle attack path, not an explicit CLI setup action. Although no exfiltration was found in the inspected install path, the broad cross-platform agent-cont...

The package's automatic postinstall downloads and executes a foreign installer, then changes the installed tool's configuration. This is concrete install-hook abuse, not necessary local b...

The package creates a concrete automatic chain from npm postinstall to an externally fetched executable that installs agent/editor hooks. This meets the install-control-surface blocking p...

The source establishes an automatic postinstall chain that mutates consumer AI-agent settings and installs plugins, reinforced by a detached persistence mechanism. This meets the blocking...

This is an unconsented postinstall mutation of a foreign AI-agent control surface. The absence of shell execution or observed exfiltration does not neutralize that automatic control-surfa...

This is a concrete automatic install-hook attack on a foreign AI-agent control surface, not merely a platform shim. The lack of observed exfiltration does not offset the installed authent...

This is malicious install-hook abuse under the policy because an automatic postinstall mutates foreign AI-agent control surfaces and performs broad host changes. The global-install guard...

The automatic lifecycle mutates shared third-party AI-agent configuration directories and user-level dependencies. This is a concrete unconsented install-hook attack surface.

The automatic lifecycle hook overwrites consumer Claude behavior and expands MCP permissions without an explicit user command. This meets the install-time AI-agent control-surface abuse b...

This is an automatic install-time delivery chain that plants an AI-directed prompt and induces broad, persistent modification of the consumer project's agent control surfaces. The behavio...