npm AI-agent policy reports, with evidence.

This is an unconsented npm postinstall mutation of broad, foreign AI-agent control surfaces, coupled with unverified remote native payload execution and persistence. It meets the firewall...

The install hook performs concrete, unconsented mutation of broad browser/AI-agent control surfaces, not merely an explicit user-command setup. The absence of observed credential exfiltra...

This is concrete unconsented postinstall mutation of a broad foreign AI-agent control surface, plus execution of an unpinned globally fetched package. The lifecycle behavior meets the blo...

The package contains no confirmed exfiltration chain, but its automatic lifecycle hook installs executable agent instructions across unrelated AI-agent platforms. That meets the firewall...

The package has no confirmed exfiltration or remote execution, but its postinstall hook concretely and unconsentedly installs active instructions into broad third-party AI-agent control s...

Source inspection confirms the policy-blocking behavior directly in the lifecycle script. CI and opt-out guards do not make the default install-time Claude Code mutation consensual.

The shipped content shows no exfiltration or remote payload behavior, but the automatic lifecycle hook performs concrete, unconsented writes to broad third-party AI-agent instruction surf...

The source confirms an unconsented postinstall mutation of broad, foreign AI-agent control surfaces. No separate exfiltration or payload execution was found, but the install-time control-...

This meets the blocking policy: an npm postinstall mutates broad foreign AI-agent control surfaces without an explicit user setup command. The remote executable delivery chain materially...

This is concrete unconsented postinstall mutation of a shared, foreign AI-agent credential/control surface, coupled with silent account provisioning and credential replacement. The behavi...

This is concrete, unconsented postinstall mutation of multiple foreign AI-agent control surfaces. Package-aligned downloading does not mitigate the control-hijack behavior.

The behavior is concrete and automatically triggered by npm postinstall, not merely an explicit setup command. It persists a downloaded MCP capability across multiple foreign AI clients.

Direct source inspection confirms an unconsented postinstall path that mutates multiple third-party AI-agent configuration and hook files. This meets the blocking boundary for broad forei...

The package contains no confirmed exfiltration or remote payload chain, but its automatic global omp-agent prompt/config mutation meets the install-time AI-agent control-hijack block boun...

The source confirms an automatic postinstall write to multiple foreign global AI-agent control surfaces. Under the stated policy, that concrete unconsented install-time mutation requires...

This is a concrete unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The lack of observed exfiltration does not mitigate the install-time configuration hijack.

The behavior is concrete and automatic at postinstall, not merely a user-invoked setup path. Although no data theft was found, the package mutates a foreign AI-agent control surface durin...

This is concrete unconsented postinstall mutation of broad foreign AI-agent control surfaces, meeting the blocking policy. Absence of exfiltration does not mitigate that install-time cont...

The package has a concrete, unconsented postinstall mutation of a foreign AI-agent control surface. Its video-editing runtime behavior appears feature-aligned, but does not mitigate that...

This is a concrete, unconsented postinstall mutation of foreign and broad AI-agent control surfaces. Local-only binding and release integrity checks do not mitigate the control-surface ta...

Direct source inspection confirms unconsented postinstall writes to broad, foreign AI-agent control surfaces. This meets the blocking policy regardless of the package’s stated automation...