npm malware reports, with evidence.

The postinstall hook downloads and installs an unverified native binary from a raw IP with TLS verification disabled, then the CLI launcher executes it. That is a concrete unconsented ins...

The automatic postinstall hook persistently changes the user's command environment and starts a restartable user service without an explicit setup command. This is unconsented install-tim...

This package creates a concrete automatic supply-chain payload path by accepting and deploying an opaque remote native binary without certificate or integrity verification. The lifecycle...

This package performs persistent SSH-access setup and background service startup from postinstall rather than an explicit user action. That is concrete unconsented install-hook abuse, eve...

This is malicious agent-control behavior combined with unconsented automatic mutation of the host configuration and dependency environment. The lack of an npm install lifecycle hook does...

The automatic lifecycle hook, self-dependency constrained to an older release, project environment access, and database authorization seeding form a concrete install-hook abuse chain. The...

The source establishes an automatic, unpinned self-install chain into a remote sandbox and a lifecycle hook that persistently changes command execution and shell configuration. This match...

The automatic postinstall chain performs broad SSH and system mutations, including remote authorized-key installation and persistent background services. This is concrete install-hook abu...

This is an unconsented install-time system modification with privileged command attempts, not ordinary dependency setup. The repeated startup path increases the persistence of that behavior.

This is concrete, unconsented install-time host data exfiltration with no corresponding package functionality. It is malicious install-hook abuse.

The package performs an automatic postinstall download or execution of opaque native code and immediately uses it to install Codex and Claude Code hooks. This is concrete install-hook abu...

The automatic lifecycle mutation of a foreign AI CLI, unverified remote executable installation, and forced self-update form a concrete install-hook abuse chain. No exfiltration is requir...

The automatic global installation of a separate AI-agent CLI is a concrete foreign control-surface mutation. Persistent PATH and desktop changes increase the impact of that lifecycle hook.

This package creates an unconsented install-time remote binary delivery and persistence path with no independent integrity verification. The absence of secret harvesting does not mitigate...

The automatic postinstall modifies both package-manager behavior and foreign AI-agent instruction surfaces. The included reviewer-directed secret-suppression rule reinforces malicious int...

The automatic postinstall chain performs broad, foreign AI-agent skill installation without an explicit user setup command. This meets the install-hook abuse blocking policy even though t...

The automatic lifecycle path executes opaque native code to modify foreign AI-agent controls, and the binary contains an explicit safety-bypass command. This meets the install-hook abuse...

The automatic lifecycle hook performs unconsented mutation of both Codex and Claude user skill directories, with recursive deletion, and changes the Python user environment. This meets th...

This is an unconsented install-time remote-payload chain that automatically invokes opaque AI-tool onboarding. The optional integrity check and process termination increase the risk.

This is an automatic lifecycle delivery chain for opaque native code from an unverified remote source, with TLS verification explicitly disabled. It creates a concrete install-time arbitr...