npm AI-agent policy reports, with evidence.

The automatic postinstall hook globally installs a third-party AI-agent CLI and persists user-environment changes. That concrete install-time behavior meets the blocking policy despite no...

This package has a concrete, automatic postinstall chain that overwrites a consumer Claude skill with broad activation instructions. Under the install-control-surface policy, that is mali...

The lifecycle hook makes broad consumer-project and agent-plugin changes automatically. This meets the blocking policy for unconsented postinstall mutation of a foreign AI-agent control s...

This is a concrete install-time AI-agent control-surface takeover, not merely an explicit setup command. The review-suppression instructions reinforce malicious intent.

The automatic postinstall writes package-controlled instructions into several foreign AI-agent skill locations. This meets the policy threshold for malicious install-hook abuse even thoug...

The automatic lifecycle hook changes foreign AI-agent configuration and introduces a moving remote command path. This meets the install-control-surface blocking policy.

The postinstall lifecycle performs unconsented broad mutation of foreign AI-agent control surfaces. This meets the install-control-surface blocking policy despite no confirmed installer e...

The package combines an automatic install hook, writes to multiple foreign AI-agent configuration surfaces, and injected instructions that direct agents to use its relay without user appr...

The automatic postinstall chain performs remote code installation and unconsented Codex plugin configuration. Its global-install guard narrows exposure but does not establish user consent...

This is an unconsented postinstall mutation of broad AI-agent control surfaces combined with automatic telemetry. The behavior is concrete and reaches user-wide configuration and arbitrar...

The package combines an automatic install hook with broad foreign project agent-control mutations and plugin installation. This meets the install-control-surface blocking policy even thou...

This is concrete, automatic mutation of a foreign AI-agent configuration area and replaces existing content. The lack of network or credential theft does not neutralize the install-time c...

The source establishes an automatic postinstall chain that globally installs a separate AI coding agent. This meets the blocking policy for unconsented lifecycle mutation of a foreign or...

This is unconsented postinstall mutation of a broad AI-agent control surface, including automatic MCP registration and remote thin-client setup. The global-install guard does not make the...

The package performs an unconsented postinstall mutation of a foreign global AI-agent control surface. This meets the install-hook abuse blocking boundary even without evidence of secret...

The automatic postinstall hook both installs a remotely downloaded executable and can globally install agent skills without an explicit setup command. That concrete lifecycle control-surf...

Direct inspection confirms an automatic postinstall hook that writes a consumer project's AGENTS.md and agent-skill directory, as well as other project files. This meets the install-contr...

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces combined with background persistence. The lack of confirmed remote exfiltration does not remove the co...

The package has a lifecycle-reachable postinstall hook that modifies broad, foreign AI-agent control surfaces without a user-invoked setup action. This meets the install-time AI-agent con...

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The lifecycle behavior is sufficient for blocking even though the installer itself does not contac...

The package performs an automatic postinstall global skill installation into broad AI-agent locations through a downloaded npx tool. This meets the install-hook abuse policy for unconsent...