npm malware reports, with evidence.

This is unconsented install-time mutation of a consumer project’s AI-agent control surface and package manifest. The lifecycle hook makes the behavior automatic and broad enough to requir...

The concrete lifecycle chain mutates consumer package-manager settings and broad AI-agent control files, then suppresses review of those generated files. This meets the install-hook abuse...

The automatic lifecycle hook broadly mutates foreign AI-agent skill locations and executes another package’s global installer. The global-only guard does not establish consent for this cr...

This is an automatic lifecycle-based remote native payload installer that disables TLS verification and has no visible integrity validation. The later launcher execution completes a concr...

The automatic postinstall and startup paths perform unconsented host-level package installation, including sudo attempts. This is concrete install-hook abuse; credential discovery adds ma...

The source establishes automatic postinstall mutation of multiple unrelated AI-agent configuration surfaces, including default activation of a Codex plugin and MCP server. This is concret...

The package has an automatic postinstall chain that mutates foreign AI-agent configuration and registers executable MCP tooling. The global-install guard does not provide explicit user co...

This is a concrete automatic lifecycle chain that executes an unverified native payload and installs hooks into foreign AI-agent environments. It meets the install-hook abuse publish-bloc...

This is not transparent package-aligned setup: automatic installation creates a persistent launcher and ships obfuscated code containing AI-agent control instructions. The embedded agent-...

The package has a concrete postinstall chain that writes package-controlled content into many unrelated AI-agent skill directories. This meets the policy for malicious install-hook abuse.

The package performs opaque third-party dependency mutation and source-map deletion automatically at install time. Although no confirmed exfiltration endpoint was found in the inspected f...

The package performs unconsented, privileged system mutation from an automatic lifecycle hook and repeats it at CLI startup. This is concrete install-hook abuse despite no confirmed secre...

This package automatically installs an opaque native payload from an unauthenticated remote endpoint and later executes it. The absence of integrity verification makes the install hook a...

The automatic lifecycle hook modifies broad AI-agent configuration and promotes project permissions globally without obtaining consent through an explicit setup command. This is concrete...

This package performs unconsented install-time and runtime host package installation, including sudo attempts, and automatically reuses third-party agent credentials. Those concrete behav...

This is a concrete automatic install-time payload chain: obfuscated code downloads and detaches a remote executable. The behavior is unrelated to the package's stated API-wrapper role.

The inspected source establishes automatic install-time mutation of consumer lifecycle and agent settings, including persistence through package.json. This meets the blocking boundary for...

The lifecycle hook automatically installs and prunes agent skills in both Codex and Claude user configuration trees. This meets the policy threshold for malicious install-hook abuse despi...

This package contains an automatic, deliberately obfuscated installer that conditionally downloads and executes an external binary. That is a concrete malicious install-hook chain unrelat...

The automatic lifecycle hook performs obfuscated remote payload download and detached execution, which is concrete malware behavior. The normal-looking Roblox wrapper code does not mitiga...