npm AI-agent policy reports, with evidence.

This is an unconsented postinstall mutation of foreign AI-agent control surfaces, not merely a user-invoked setup tool. The CI and command-availability guards limit execution in some envi...

The package performs broad AI-agent and project mutations automatically from postinstall, including user-wide Codex changes and detached follow-up execution. This is a concrete unconsente...

The package performs automatic postinstall mutation of a foreign consumer project and AI-agent configuration, then persists execution in that project's lifecycle scripts. This is a concre...

The package uses an automatic lifecycle hook to silently disable a safety instruction in a separately installed AI-agent SDK. The confirmed local CLI endpoint does not offset this concret...

The package performs unconsented postinstall mutation of a consumer project's AI-agent control surface and persists its own lifecycle command. That meets the install-control-surface block...

The package has a concrete automatic install-time path that mutates project and user-wide AI-agent plugin control surfaces, including adding third-party plugins. This exceeds a transparen...

This is malicious install-hook abuse under the policy because an automatic npm postinstall mutates a consumer’s broad AI-agent control surface and Git hooks. No network theft was needed t...

The automatic postinstall chain performs broad consumer-project agent configuration and permission changes with no explicit user command or consent. This meets the install-control-surface...

The automatic lifecycle hook trusts remote metadata to authorize both a native payload and arbitrary skill content, then executes the payload and installs the content into a global AI ski...

The automatic postinstall chain alters foreign AI-agent configuration and permission state. This is concrete unconsented install-time control-surface mutation.

This is a concrete install-hook abuse chain: an npm postinstall silently installs a separate global AI-agent CLI and persists environment changes. The lack of direct credential theft does...

The package has an automatic postinstall path that writes its instructions into multiple, including discovered, AI-agent skill directories. This is unconsented broad AI-agent control-surf...

This is an automatic postinstall mutation of Claude Code's global or project skill control surface, including overwriting matching skills and executing copied modules. The lack of network...

The automatic postinstall hook writes a globally loaded, behavior-bearing agent skill into multiple existing harnesses. Its broad trigger rules and shell permissions make this a concrete...

The package performs unconsented postinstall mutation of OpenCode configuration and injects binding instructions into future agent sessions. This is concrete install-hook abuse even thoug...

The lifecycle hook performs unconsented broad mutation of consumer AI-agent control files and establishes persistence. This is concrete install-hook abuse, not ordinary package setup.

The package has a concrete, automatic postinstall path that mutates third-party AI-agent control surfaces in the user's home directory. Although no credential theft or network exfiltratio...

This is a typosquatted Grok package whose automatic installer overwrites the shared Grok executable and configuration with an uninspectable binary from a different publisher namespace. Th...

The package combines an automatic lifecycle hook, direct AI-agent instructions to act without a user command, and persistent writes to broad foreign AI-agent control surfaces. This is con...

This package performs broad, unconsented consumer-project mutation during postinstall, including AI-agent control files. That meets the install-hook abuse blocking policy even though no s...

Automatic postinstall writes into global Claude Code and Codex skill registries create an unconsented AI-agent control-surface change. This meets the install-hook abuse blocking policy.