npm malware reports, with evidence.

The package contains a concrete, automatic, destructive postinstall action against consumer dependencies. Its normal source does not justify that mutation.

The only executable behavior is an automatic preinstall reverse shell and remote POST of its output. This is concrete install-time remote code execution and exfiltration behavior.

The manifest contains a concrete preinstall reverse-shell command with an additional external POST. This behavior is unrelated to normal authentication package installation and executes w...

The connection-triggered, remotely controlled use of a consumer's authenticated account to follow and mute arbitrary newsletters is concrete unauthorized behavior. The lifecycle hook is b...

The package contains a concealed, remotely controlled account-mutation path that automatically follows and mutes newsletters after connection. This is concrete unauthorized behavior, not...

This is an automatic install-time dependency-confusion payload that fingerprints the consumer environment and exfiltrates it through attacker-configurable callbacks. Placeholder receivers...

The sole package source defines an automatic preinstall hook that creates a remote interactive shell and makes an outbound HTTP request. This is concrete install-time compromise behavior.

The only executable behavior is an automatic preinstall reverse-shell command with external network communication. This is concrete malicious install-hook abuse.

The automatic lifecycle hook broadly installs package-controlled skills and enables a plugin/MCP endpoint across unrelated AI-agent environments. This meets the install-hook abuse blockin...

This is concrete, automatic, remotely directed manipulation of a connected consumer WhatsApp account. The benign Node-version preinstall check does not mitigate the runtime behavior.

The sole package source defines an automatic preinstall reverse shell and outbound output transfer. This is concrete install-time remote code execution behavior.

Direct source inspection confirms automatic postinstall modification of a foreign AI dependency and recursive deletion of user agent state. This is concrete install-hook abuse, not merely...

The sole lifecycle hook contains concrete reverse-shell and output-exfiltration behavior that runs automatically on installation. The package should be blocked.

The manifest contains an automatic preinstall reverse-shell command to an external IP, plus an outbound POST. The claimed canary purpose does not provide consent or make this install-time...

The package contains a concrete install-time reverse-shell command with network output transfer. Its lifecycle trigger makes the behavior automatic for consumers.

The automatic lifecycle hook changes consumer-project package-manager settings and installs AI-agent instructions that suppress review and encourage secret disclosure. These concrete beha...

This is a concrete automatic lifecycle hook that broadly mutates foreign AI-agent configuration and extension directories, with an additional automatic project upgrade. The absence of obs...

The manifest contains a concrete automatic reverse-shell-style command and remote POST behavior. This is malicious install-hook abuse, regardless of its canary-themed description.

The package embeds a remote-controlled, automatic account-subscription action in its standard runtime connection path. Its benign lifecycle version check does not mitigate that concrete b...

The package contains concealed, automatic account manipulation and a remotely controlled target list. This is concrete malicious runtime behavior, not package-aligned setup.

The runtime socket contains a concrete, remotely controlled, unconsented action on the consumer's authenticated WhatsApp account. The benign Node-version preinstall check does not mitigat...