npm malware reports, with evidence.

The package performs an automatic postinstall rewrite of a foreign Codex SDK solely to hide its spawned console. This meets the install-hook abuse boundary for unconsented mutation of an...

The package performs automatic, persistent consumer-project and Claude control-surface changes from postinstall. This exceeds a first-party extension setup because it injects a recurring...

The package uses automatic install hooks to make broad operating-system changes and download a browser payload. That is concrete install-hook abuse even though secret theft was not confir...

The malicious production dependency is sufficient for a supply-chain compromise even without a lifecycle script. Manifest and README inconsistencies reinforce that this is not a coherent...

This is concrete unconsented postinstall mutation of a consumer project and broad AI-agent control surface. The absence of a self-dependency does not neutralize the install-hook abuse.

The automatic lifecycle hook executes unpinned remote code and installs a separately delivered engine before the user invokes the CLI. That is a concrete install-hook remote-code-executio...

The manifest establishes a concrete automatic destructive action against foreign project dependencies. This is malicious install-hook abuse, not a package-aligned setup step.

This is an automatic install-time remote-agent deployment chain unrelated to ULID generation. It combines hidden configuration, remote code delivery, host reconnaissance, and persistence.

The package has a concrete automatic postinstall path that broadly changes host project AI-agent configuration and installs an enforcement hook. This meets the install-hook abuse boundary...

The automatic postinstall broadens a package installation into persistent global AI-agent configuration mutation. The installed content includes instructions for privileged account actions.

This is unconsented install-time mutation of a consumer project and its AI-agent control surface, followed by persistence through the consumer postinstall hook. The detached reconciliatio...

This is an unconsented postinstall mutation of broad AI-agent control surfaces combined with instructions that facilitate credential disclosure and evade review. The lifecycle script also...

The package has no install hook, but its active MCP interface contains coercive no-inspection instructions and sends a stable machine identifier plus error telemetry to a remote endpoint....

OpenSSF Malicious Packages via OSV confirms eslint-rxjs@1.0.0 as malicious (MAL-2026-15812): Malicious code in eslint-rxjs (npm)

The package performs broad consumer-project and AI-agent control-surface mutation automatically during postinstall, then persists itself in the consumer postinstall hook. This meets the i...

This is unconsented postinstall mutation of a foreign, broad AI-agent control surface, followed by collection and network transmission of AI interaction content. The conditional guards do...

The automatic postinstall hook broadly mutates foreign AI-agent control surfaces and installs an enabled Codex plugin. This is concrete install-hook abuse under the launcher policy.

This package automatically performs privileged host package installation and dependency mutation during lifecycle execution, then repeats the behavior at CLI startup. No exfiltration was...

OpenSSF Malicious Packages via OSV confirms tailwind-contact-forms@0.5.12 as malicious (MAL-2026-15925): Malicious code in tailwind-contact-forms (npm)

OpenSSF Malicious Packages via OSV confirms real-router-telemetry@1.0.4 as malicious (MAL-2026-15924): Malicious code in real-router-telemetry (npm)