npm malware reports, with evidence.

This is an automatic install-time remote-code-execution chain with persistent user-directory writes and no cryptographic integrity verification. The fixed repository and size check do not...

The encoded directive aimed at AI reviewers is malicious social engineering, and the package deliberately obscures the runtime code that consumers import. Although no install hook or conf...

This is a concrete install-hook abuse chain: a dependency install automatically downloads and executes remote scripts and adds foreign AI tooling. The opt-out variables do not establish p...

The automatic lifecycle hook performs remote content retrieval and unconsented writes and deletions in multiple global AI-agent instruction directories. This is concrete install-hook abus...

This is an automatic install-time mutation of a foreign AI-agent executable surface. The package supplies opaque native replacements, so the resulting code cannot be source-audited here.

This is a concealed install-time remote code execution chain, not functionality required for a glob matcher. The automatic execution, opaque payload retrieval, evaluation, and cleanup est...

The package uses automatic lifecycle hooks to stage, execute, and erase a concealed remote payload. This is concrete malicious install-hook abuse.

The postinstall dry-run claim is contradicted by the helper’s unchecked default execution path. The package automatically launches a detached listener and alters user state during install...

This is malicious under the install-control-surface policy: postinstall modifies all detected coding-agent configurations without user consent while installing a remote executable payload...

The package’s postinstall behavior materially differs from its stated validation purpose and automatically launches a persistent service. Its local-only default does not make the unconsen...

The only package source defines an automatic preinstall hook that establishes a remote interactive shell and performs external data posting. This is concrete install-time malware behavior.

The package has a concrete automatic postinstall chain that changes user-wide Claude settings to capture and export session content. This meets the install-hook abuse policy for a malicio...

The install-time hook contains concrete remote-shell behavior, not a package-aligned setup action. This is malicious install-hook abuse.

The sole lifecycle script implements an install-time reverse shell and sends its output externally. This is concrete malicious behavior, not package setup.

The package performs unconsented install-time mutation of a broad AI-agent control surface by installing a separate global Claude Code package, alongside persistent shell and launcher cha...

This is concrete concealed install-hook abuse, not a user-invoked setup flow. The lifecycle hook triggers process creation, persistent user-home changes, and SSH activity without consent.

The source directly contradicts the postinstall dry-run claim: the invoked helper takes its full server-start and SSH path. The deliberate concealment and automatic lifecycle execution es...

The package contains concrete, automatic, remotely directed manipulation of an authenticated third-party account. Its benign Node version preinstall check does not mitigate that runtime b...

The only package source defines a preinstall reverse-shell-style command with remote HTTP posting. This is concrete malicious install-hook behavior.

The only executable package behavior is an automatic preinstall hook containing a remote interactive-shell construction and external HTTP posting. This is concrete install-time compromise...