npm AI-agent policy reports, with evidence.

The postinstall hook performs unconsented mutation of a broad, foreign AI-agent control surface. This meets the blocking policy regardless of the package's stated browser-automation purpose.

The concrete postinstall fan-out writes behavior-bearing assets into foreign/broad AI-agent control surfaces without explicit user invocation. This meets the install-control-surface block...

Source confirms unconsented postinstall mutation of foreign/broad AI-agent configuration surfaces. This meets the install-control-surface blocking policy despite no confirmed network exfi...

Direct source inspection confirms unconsented postinstall mutation of broad, foreign AI-agent control surfaces. This meets the install-control-surface blocking policy regardless of the ab...

This is a concrete unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The global-install guard reduces scope but does not provide consent for the configuration...

Source directly establishes unconsented postinstall mutation of broad, foreign AI-agent control surfaces, meeting the blocking policy. The package-aligned download and local credential ha...

Source inspection confirms the lifecycle hook silently performs broad cross-agent configuration and instruction injection. This meets the publish-block policy regardless of the absence of...

The lifecycle behavior meets the block boundary: postinstall automatically mutates persistent Claude Code and other AI-tool control/configuration surfaces. Opt-in harvest networking does...

The lifecycle hook directly performs broad foreign AI-agent registration and instruction-file mutation without an explicit user command. This meets the install-control-surface block crite...

This is a concrete unconsented postinstall mutation of foreign AI-agent control surfaces, coupled to baked remote egress and transcript collection. Consent governs capture only after the...

Direct source inspection confirms the lifecycle hook performs broad AI-agent configuration and instruction changes automatically. This meets the blocking policy regardless of the absence...

Direct source inspection confirms a concrete broad AI-agent control-surface mutation chain triggered automatically by npm postinstall. This meets the blocking policy regardless of the pac...

This is concrete unconsented postinstall mutation of foreign AI-agent control surfaces, with a baked remote collector and persistence. Consent is requested only after setup, so it does no...

This is concrete, unconsented postinstall mutation of foreign and broad AI-agent configuration/control surfaces. The absence of exfiltration does not mitigate the automatic cross-agent pe...

Source inspection confirms an unconsented postinstall mutation of consumer AI-agent instruction files and build controls. Although no exfiltration or remote execution was found, this meet...

The lifecycle hook is concrete, unconditional for ~/.agents/skills, and modifies a broad foreign AI-agent discovery path. Under the install-control-surface policy, this requires a block r...

This is a concrete, unconsented postinstall mutation of broad foreign AI-agent control surfaces. The opt-out environment variable and lack of postinstall networking do not remove the inst...

This is a concrete unconsented postinstall mutation of foreign and broad AI-agent control surfaces, meeting the firewall block boundary. The nominal optimization purpose and opt-in harves...

The source confirms a concrete install-time global OpenCode takeover and shell persistence chain. The interactive prompt does not remove the unconsented postinstall mutation risk.

This is concrete postinstall mutation of several foreign/global AI-agent control surfaces, meeting the blocking policy. The additional daemon autostart increases persistence risk.

This is concrete, unconsented postinstall mutation of broad foreign AI-agent control surfaces, which meets the publish-block policy. The skip flags and lack of lifecycle networking do not...