npm AI-agent policy reports, with evidence.

This is an unconsented postinstall mutation of foreign AI-agent control surfaces, including destructive replacement of existing targets. The lifecycle hook is sufficient for a publish blo...

The package contains a concrete automatic postinstall chain that globally installs another AI-agent package. This meets the install-control-surface blocking policy despite no confirmed da...

This package combines an automatic lifecycle hook, broad consumer-project agent configuration writes, deliberate package-manager policy changes, and reviewer-directed secret-disclosure in...

The automatic global postinstall hook overwrites cross-vendor AI-agent skill directories. This is concrete install-hook abuse even though no secret theft was confirmed.

This is an unconsented install-time mutation of a broad AI-agent control surface. Integrity checks on the downloaded application do not remove the configuration-hijack behavior.

The package has a concrete, automatic postinstall chain that mutates a consuming project's broad AI-agent control surface. This meets the install-control-surface blocking policy even thou...

The package performs automatic, cross-platform global AI-agent control-surface writes during npm installation. This concrete lifecycle behavior meets the blocking policy regardless of the...

The automatic lifecycle hook modifies the shared ~/.grok executable and configuration surface, including registry selection. No direct exfiltration is present in the inspected JavaScript,...

The global-install guard does not make automatic modification of shared Codex routing and agent files user-invoked setup. The update path compounds the risk by automatically reinstalling...

This is a concrete automatic postinstall chain that writes global AI-agent assets and modifies a consumer project. The absence of observed data theft does not neutralize the unconsented c...

This is an unconsented npm postinstall mutation of broad AI-agent control surfaces. The install path itself establishes concrete persistence risk even without a package-controlled network...

The global-install guard limits scope but does not establish consent for automatic writes to multiple foreign AI-agent control surfaces. The lifecycle hook and installer together meet the...

The package performs an unconsented postinstall mutation of a broad, foreign AI-agent control surface by globally installing opencode-ai. This concrete lifecycle behavior warrants blockin...

This is an unconsented postinstall mutation of a broad AI-agent control surface, including automatic MCP registration and deletion of files in other tool configurations. That meets the in...

The automatic lifecycle hook modifies foreign AI-agent configuration and enables a new MCP command. This is concrete unconsented postinstall control-surface mutation.

This is an automatic postinstall chain that executes a remotely fetched binary and mutates third-party AI-agent configuration. Its global-install gate and opt-out variables do not establi...

This is an unconsented install-time mutation of a broad, foreign AI-agent control surface. The automatic lifecycle chain establishes concrete install-hook abuse even though direct credent...

This is concrete, automatic postinstall mutation of foreign AI-agent control surfaces and the consuming project. The lifecycle behavior meets the blocking policy even though no exfiltrati...

This is malicious install-hook abuse under the stated policy because an automatic npm lifecycle hook silently mutates a user's AI-agent configuration, deletes artifacts, and adds executab...

The automatic postinstall hook persistently injects external commands into the user's global Claude Code configuration. Its conditional check does not establish consent and the empty matc...

The install-time hook creates an unconsented AI-agent control-surface mutation and hides errors. This is concrete install-hook abuse even though the rest of the application includes ordin...