npm malware reports, with evidence.

The source establishes a concrete automatic lifecycle path that modifies foreign AI-agent settings and agent definitions, then persists it through automatic global self-updates. This meet...

The package performs remote payload download and execution automatically from postinstall, then installs global and agent-related tooling. The safe-mode and skip variables do not establis...

The automatic lifecycle hook establishes persistent background execution through the operating system service manager. This is an unconsented install-time persistence mechanism affecting...

The package has an automatic postinstall chain that downloads package-controlled content and mutates a consumer AI-agent control surface. This is concrete install-hook abuse rather than a...

The package's postinstall hook performs automatic remote-code execution, global package installation, and remote skill acquisition. Those install-time actions exceed package setup and pre...

This package has an automatic install hook that performs destructive dependency mutation and attempts privileged system software installation. That is concrete install-hook abuse even tho...

The package automatically creates root-owned persistence during installation and enables a self-updating execution path. The local-install and cloud-link guards reduce scope but do not ne...

The source establishes automatic postinstall mutation, opaque remote binary delivery without cryptographic verification, global AI-package installation, and subsequent execution. These be...

The malicious behavior is runtime-triggered through the default API path and performs unconsented authenticated actions selected by a remote operator. The benign Node version check does n...

This is concealed, remotely directed mutation of a user's WhatsApp account during ordinary library use. The benign Node-version preinstall check does not mitigate the runtime account abuse.

The automatic lifecycle hook changes foreign AI-agent instruction locations and installs an extension, while the injected content directs AI behavior. This is concrete install-hook abuse...

The automatic postinstall chain broadly modifies third-party AI-agent skill directories. This meets the install-control-surface blocking policy despite the absence of demonstrated network...

OpenSSF/OSV malware advisory MAL-2026-15573 blocks this version. The preinstall.js lifecycle script executed automatically by npm install performs three hostile actions against the instal...

OpenSSF/OSV malware advisory MAL-2026-15572 blocks this version. On `npm install`, package.json's preinstall hook (`node preinstall.js || true`) auto-runs a script that (1) enumerates pro...

OpenSSF/OSV malware advisory MAL-2026-15571 blocks this version. grafeno-billing@1.0.0 is a stub package whose only substantive code is a preinstall lifecycle hook. On npm install, preins...

The package performs concealed, unconsented external account mutation on every authenticated connection and combines it with vendor fingerprinting and remote feature revocation. The lifec...

Direct source inspection confirms an automatic postinstall hook that writes a broad OpenCode agent control surface into the consuming project. This meets the install-hook abuse blocking p...

OpenSSF/OSV malware advisory MAL-2026-14769 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14775 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14763 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code