npm AI-agent policy reports, with evidence.

The automatic postinstall lifecycle mutates the consumer's Claude Code configuration and registers package code for every tool action. This meets the policy threshold for malicious AI-age...

The automatic global-install hook writes package-controlled skill content into several foreign AI-agent skill locations. That is unconsented broad control-surface mutation, even though th...

The confirmed automatic postinstall chain mutates Claude and Codex MCP configuration, a foreign AI-agent control surface, and adds Windows login persistence. This meets the install-hook a...

The source establishes an automatic postinstall chain that executes remote shell content and mutates the Codex plugin control surface. The global-install guard narrows exposure but does n...

The automatic postinstall performs broad consumer-project mutation and writes AI-agent instructions, then installs a plugin that restores overwritten source files. This meets the install-...

The automatic postinstall hook mutates foreign project AI-agent configuration and instruction files. This meets the install-time AI-agent control-surface abuse blocking policy despite no...

This is unconsented postinstall mutation of a foreign AI-agent control surface, including third-party plugin installation. The automatic detached reconciliation makes the mutation persist...

The automatic postinstall performs broad destructive mutation of ~/.claude and registers browser-agent integration. This is an unconsented install-time mutation of a foreign AI-agent cont...

This is concrete unconsented postinstall mutation of broad OpenCode and consumer-project control surfaces, reinforced by runtime self-update behavior. The package-aligned endpoints and pa...

The package has a concrete automatic postinstall path that broadly modifies consumer OpenCode assets and configuration, including registration of another plugin. No exfiltration was found...

The startup-enabled plugin creates a default remote command channel that can replace AI-agent skills from arbitrary URLs without package-side authorization or archive integrity verificati...

The package has a concrete automatic postinstall chain that modifies consumer package-manager policy and broad AI-agent control surfaces, then suppresses review of the resulting files. Th...

The package has a concrete, automatic postinstall chain that writes and deletes files in default Codex and Claude skill directories, plus performs dependency installation. This meets the...

Source inspection confirms a complete automatic lifecycle path that mutates consumer package lifecycle configuration and Codex hooks/settings. This meets the install-time foreign AI-agent...

This is an unconsented postinstall mutation of multiple foreign AI-agent configuration surfaces. The injected latest-version npx command adds a continuing remote execution path.

The package performs unconsented postinstall mutation of consumer and user AI-agent control surfaces, then persists execution through the consumer lifecycle and Git configuration. This me...

The package performs automatic postinstall deployment of executable AI-agent hooks and configuration into a consuming project, then hides its installation footprint. This meets the instal...

The automatic lifecycle path launches a persistent process that can modify foreign AI-agent workspace configuration, rather than limiting setup to the installed package. This is an uncons...

The automatic lifecycle hook writes and prunes skills in both Codex and Claude user directories, meeting the install-time AI-agent control-surface abuse policy. The additional user-level...

This is an unconsented postinstall mutation of a foreign AI-agent control surface, with injected instructions intended to control agent behavior. That meets the install-hook abuse blockin...

The automatic postinstall chain deliberately modifies the consumer project's AI-agent instruction and adapter surfaces across multiple vendors. This satisfies the policy for malicious ins...