npm AI-agent policy reports, with evidence.

This is an unconsented postinstall mutation of a broad, foreign AI-agent control surface. The absence of network exfiltration does not remove the persistent instruction-injection risk.

The automatic postinstall-to-Claude-hook chain is concrete, persistent, and reaches network transmission of captured AI interaction data. It meets the install-control-surface blocking pol...

The automatic lifecycle hook persistently modifies multiple global AI-agent configurations and the consumer project. This meets the install-control-surface policy for a publish block.

The source establishes automatic postinstall mutation of a consumer project, persistent lifecycle injection, project-scoped agent-plugin installation, and detached reapplication. These ar...

The package performs global AI-agent configuration writes, background execution, and persistence automatically from postinstall. This meets the install-control-surface block policy despit...

The automatic postinstall path mutates persistent AI-agent configuration and existing workspace control files. This is concrete unconsented install-time control-surface mutation, so it me...

The package silently persists itself into Claude Desktop during npm installation, creating automatic execution in a foreign AI-agent control surface. Its subsequent credential access and...

The automatic postinstall path modifies global Codex configuration and installs session-start execution hooks. This is an unconsented install-time mutation of a broad AI-agent control sur...

The package contains a concrete automatic postinstall chain that globally installs a separate AI-agent package. The conditional and opt-out do not establish consent for this installation-...

The postinstall hook unconsentedly persists mandatory package instructions into OpenCode's configuration. This concrete agent-control mutation warrants blocking.

The package has a concrete postinstall path that automatically installs a foreign global AI-agent package. This meets the install-control-surface blocking policy even though no separate s...

This is unconsented postinstall mutation of foreign AI-agent control surfaces, coupled with installed behavior directives and automatic global updating. The global-only gate does not remo...

This is an unconsented postinstall mutation of foreign AI-agent control surfaces, compounded by code that prefers permission bypass. The behavior meets the install-control-surface block p...

The package has a concrete automatic postinstall chain that mutates DSH agent configuration and registers executable plugin code. Its later credentialed external image transmission compou...

The install hook performs an unconsented global mutation of a foreign AI-agent control surface. The detection guard and opt-out variable do not make this automatic lifecycle action user-c...

This is an automatic postinstall mutation of broad, foreign AI-agent control surfaces, including enabling a Codex plugin. The behavior meets the install-control-surface block policy regar...

This package performs unconsented postinstall mutation of broad, foreign AI-agent control surfaces and the consumer project. That concrete lifecycle behavior meets the publish-block polic...

Static inspection establishes automatic, project-wide configuration and AI-agent control-surface writes during installation. The reviewer-directed instruction to suppress secret-leak find...

This is an unconsented postinstall mutation of a broad AI-agent control surface. The automatic configuration change makes package-authored instructions load in later OpenCode sessions.

The automatic installer both provisions OpenCode MCP configuration and applies remotely delivered content into the consumer project. This is a concrete unconsented postinstall AI-agent co...

This is an unconsented postinstall mutation of a consumer AI-agent control surface, with enabled npx-backed tool commands. It meets the install-control-surface block policy despite the ab...