npm malware reports, with evidence.

The installer performs unconsented network retrieval and execution during npm postinstall, including a remote shell installer and remote skill distribution. This is a concrete install-hoo...

The package performs broad consumer-project AI-agent configuration and hook mutation from postinstall rather than through an explicit user command. This meets the install-hook abuse block...

The automatic lifecycle script mutates broad AI-agent and repository control surfaces in a consumer project. This meets the install-hook abuse blocking policy despite no observed exfiltra...

The package performs an unconsented postinstall mutation of a foreign, broadly available AI-agent control surface. The absence of credential theft does not neutralize that concrete instal...

The automatic postinstall mutates foreign AI-agent control surfaces and adds persistence through Git hooks. This is concrete install-hook abuse even though no automatic network exfiltrati...

The package covertly injects third-party newsletter metadata into every prepared image and video message. The benign Node-version preinstall check does not mitigate this runtime content m...

The automatic lifecycle hook establishes a concrete AI-agent control-surface mutation chain through an opaque native binary. This meets the install-hook abuse blocking policy even though...

The automatic lifecycle hook executes opaque remote code from a mutable branch, creating a concrete remote-code-execution supply-chain path. Skip guards do not protect normal global insta...

The automatic postinstall invokes an opaque native binary to modify Codex and Claude Code hooks. That is a concrete unconsented install-time AI-agent control-surface mutation.

This is an automatic install-hook remote-code-execution chain, not a transparent bundled installer. The local skip guards do not mitigate execution of mutable remote code during the opted...

The automatic lifecycle hook modifies several unrelated global AI-agent instruction directories and accepts mutable remote instruction content. This is a concrete install-hook control-sur...

The automatic postinstall hook establishes privileged, hidden persistence and installs extra software on Windows. These actions are concrete install-hook abuse regardless of the package's...

The lifecycle hook creates privileged persistence and installs software automatically, establishing a concrete install-hook abuse path. The source also contains an explicit scanner-avoida...

The automatic lifecycle chain modifies consumer AI-agent configuration and adds a hook that can block agent session termination. This meets the install-hook abuse blocking policy.

This is concrete install-hook abuse: an automatic lifecycle hook establishes elevated persistence and makes unrelated system and project changes. The behavior is not limited to explicit u...

This is concrete install-hook abuse: an automatic lifecycle script establishes elevated persistence and installs system dependencies. The localhost-only check does not offset the unconsen...

The automatic lifecycle chain is complete: postinstall invokes connect, which registers MCP integrations at user or global scope. This meets the install-time foreign AI-agent control-surf...

The postinstall hook performs an unconsented global installation of a foreign AI-agent package when local checks fail. This concrete install-time control-surface mutation meets the publis...

The package performs automatic privileged persistence and dependency installation from a postinstall hook. These actions are concrete install-hook abuse regardless of the watchdog's state...

This is an automatic install-time remote payload execution chain with persistence and no cryptographic verification. The opaque executable is immediately authorized to perform further ins...