npm malware reports, with evidence.

The automatic global postinstall hook mutates a broad AI-agent process control surface by signalling processes selected with a generic marker. Its guardrails reduce exposure but do not es...

The package performs unconsented privileged host mutation during installation and repeats it at CLI startup. This is concrete install-hook abuse even though inspected files did not show s...

This package creates an automatic install-time remote code execution path from mutable external content and launches native installers. The behavior is concrete and runs with the installi...

The package embeds a delayed, geographically and language-targeted browser-disruption payload in its entry bundle. The absence of lifecycle hooks does not mitigate this concrete runtime a...

The package automatically persists a user-scope AI-agent command rather than requiring an explicit setup action. Its npx latest registration makes the installed control surface execute a...

The automatic lifecycle path rewrites foreign DSH authentication and sandbox safeguards, while the launcher persists an unsafe default in user configuration. This is concrete install-hook...

This is an install-time modification of a third-party AI-agent runtime that weakens security controls, followed by launcher-driven persistence of unrestricted permissions. The behavior me...

The automatic lifecycle hook and CLI initialization form a concrete unconsented agent-control-surface mutation chain. Obfuscation makes the additional target locations less transparent.

The package performs broad, automatic consumer-project mutation and installs a plugin that reasserts control over overwritten files. This is concrete install-hook abuse even though the in...

This is concrete install-hook abuse rather than ordinary platform setup: it automatically alters another AI-agent package's credential, authentication, and sandbox controls. No exfiltrati...

The runtime entrypoint contains concrete, delayed, targeted browser disruption and a remote audio payload unrelated to a component library. This establishes malicious protestware behavior...

This is an automatic install-time mutation of broad third-party AI-agent control surfaces combined with remote binary acquisition and host persistence. It meets the install-hook abuse blo...

The automatic postinstall executes an opaque initializer that registers agent skills in user-home directories. This meets the install-hook abuse policy regardless of whether secret theft...

The inspected lifecycle chain automatically modifies consumer lifecycle configuration and Codex hooks. This meets the install-hook-abuse blocking boundary regardless of the package's stat...

This is an automatic install-time mutation of a consumer AI control surface that redirects imports into telemetry interception and remote transmission. The package-aligned endpoint does n...

The automatic lifecycle hook modifies existing agent configurations and installs a package-controlled MCP command without an explicit user setup action. This meets the install-hook abuse...

This is concrete automatic install-time mutation of foreign, global AI-agent control surfaces and the consuming project. The lack of observed network exfiltration does not remove that ins...

The concealed remote redirect chain is concrete harmful behavior, even though it is not triggered during npm installation. The package should be blocked as a browser-delivered malicious p...

The package performs unconsented system package installation during postinstall and normal startup, then automatically globally reinstalls itself from npm. These are concrete install-hook...

This is an unconsented install-time remote code execution chain. The signature check does not mitigate the package author's ability to deliver arbitrary code after publication.

This is a concrete install-hook payload delivery chain: an opaque native executable is automatically downloaded from a fixed host with TLS verification disabled, extracted, and enabled fo...