npm malware reports, with evidence.

Automatic system-package installation and browser/system-dependency installation are materially broader than ordinary package setup and execute before the user runs the package. The lifec...

The lifecycle hook makes broad AI-agent configuration changes and user-level dependency installation automatically. This meets the install-hook abuse blocking policy even though no direct...

The package combines an automatic lifecycle hook, a self-dependency selecting another release, broad consumer-project mutation, user-wide AI-agent changes, and detached persistence of the...

This is a concrete, unconsented install-hook abuse chain that broadly mutates and persistently controls consumer project files. No self-dependency or install-time exfiltration was found,...

The inspected code establishes automatic, noninteractive consumer-project and AI-agent plugin mutation during postinstall, with detached persistence of reconciliation. This exceeds transp...

The automatic postinstall mutation targets broad, foreign AI-agent control surfaces and changes how host agents handle tasks. This meets the install-hook abuse blocking boundary despite t...

The package contains a concrete automatic install hook that runs a package manager against an external relative directory. The browser bundle findings do not mitigate this install-time mu...

The automatic lifecycle hook performs unconsented global AI-agent tooling and persistent user-environment mutations. This meets the install-hook abuse blocking boundary even though no cre...

This is a concrete install-hook abuse chain: automatic installation mutates a consumer project, changes its agent control surface, and persists through the consumer postinstall script. Th...

This is an unconsented install-time remote-code execution chain: an opaque native payload is downloaded, persisted, and executed automatically. The visible source provides no integrity ve...

This release automatically modifies foreign AI-agent configuration during npm installation and adds Windows login persistence. Those actions meet the install-hook abuse blocking policy ev...

This package performs unconsented, automatic system package installation from a registry lifecycle hook and retries it during normal startup. Its external agent-hook refresh behavior adds...

The automatic postinstall hook performs unconsented system-level package installation and can request elevated privileges. This is concrete install-hook abuse, not a user-invoked setup ac...

The automatic lifecycle hook modifies third-party AI-agent source and searches broadly for targets. This meets the install-hook abuse block policy despite the visible patches appearing UI...

The package combines an automatic lifecycle trigger with unconsented mutation of the consumer repository and detached process launch. Although no exfiltration was confirmed, these install...

The automatic lifecycle hook overwrites a global AI CLI command owned outside this package rather than only configuring package-owned files. The absence of observed network or credential...

The package has a concrete automatic postinstall chain that broadly changes consumer-project Claude configuration and installs agent plugins. This meets the install-hook abuse blocking bo...

This is an automatic install-time takeover of a global AI-agent command outside the package directory. The global-install guard and absence of visible JavaScript exfiltration do not remov...

OpenSSF Malicious Packages via OSV confirms @bx-ui-framework/authentication@16.0.0 as malicious (MAL-2026-15866): Malicious code in @bx-ui-framework/authentication (npm)

This is an unconsented postinstall mutation of a broad AI-agent control surface. The automatic hooks and global instruction changes meet the install-hook abuse blocking policy.

The automatic lifecycle hook modifies user-wide agent configuration locations for both Codex and Claude. This meets the install-hook abuse policy even though no source-level exfiltration...