npm malware reports, with evidence.

The package combines an automatic global postinstall hook with broad PATH and command interception for Claude Code and Codex, recurring scheduled execution, and automatic remote package u...

The install lifecycle performs broad project-level Claude control-surface mutation rather than limiting itself to package-owned files or an explicit setup command. No lifecycle exfiltrati...

The package has a concrete automatic postinstall path that mutates global AI-agent configuration and activates companion extensions. This meets the install-hook abuse boundary even though...

The postinstall hook makes unconsented, broad changes to foreign AI-agent control surfaces and the host. This meets the install-hook abuse blocking policy despite its global-install guard...

The package combines reviewer and assistant-directed social engineering with an explicit command that persistently changes consumer lifecycle scripts and transmits dependency inventory. I...

The import-time payload combines deliberate obfuscation, host access, concealed process creation, and network transmission. Its behavior is incompatible with the advertised package surface.

The package uses an automatic npm lifecycle hook to modify global configuration for multiple unrelated AI-agent products and to register executable MCP integrations. This meets the instal...

The automatic lifecycle hook delivers opaque native code from remote hosts and the audited JavaScript subsequently executes it. Same-origin checksum verification cannot protect against a...

This is a concrete install-hook abuse chain: automatic lifecycle execution fetches or stages a native payload and launches it without integrity verification. The absence of direct credent...

This is a concrete automatic install-hook download-and-execute chain, not merely a user-invoked CLI installer. The remote payload is mutable and lacks integrity verification.

The package performs privileged persistence and system software installation automatically from postinstall. This is concrete unconsented install-hook abuse, even though the visible watch...

This is a concrete install-hook supply-chain risk: automatic retrieval and staging of an unverified native executable with TLS verification disabled. No self-contained credential theft is...

The published runtime bundle contains a concrete, automatically triggered browser-disruption payload. The absence of an npm lifecycle hook does not mitigate runtime protestware affecting...

This package has a complete automatic lifecycle chain that writes bundled instructions into the user-wide Claude Code control surface. The foreign, broad agent configuration mutation is c...

The package executes a remotely downloaded shell script automatically from postinstall. Safe mode and opt-out variables do not make the default install-time remote execution consensual.

The automatic hook mutates and activates integrations across unrelated AI-agent configurations, which is concrete install-hook abuse. This meets the blocking policy even without evidence...

This is an automatic install-time remote-code execution chain that can mutate the installing machine through unpinned external content. The global-install gate limits reach but does not r...

This is a concrete, automatic, remotely controlled modification of a user's WhatsApp account state that is unrelated to establishing a connection. The install hook is benign, but it does...

This is concrete install-time remote-access and persistence behavior affecting local and remote SSH control surfaces. Existing credentials gate success but do not provide meaningful conse...

The automatic self-update and unattended reconfiguration create a persistent agent-control path, and the injected instruction explicitly suppresses permission requests for external action...