npm malware reports, with evidence.

This is concrete, unconsented install-time command execution and host-information exfiltration to an unrelated webhook. The import-time beacon expands the trigger beyond installation.

The automatic lifecycle hook makes unverified remote binary placement and privileged system mutation without a separate user command. This concrete install-time behavior, host telemetry,...

The package performs broad, destructive consumer-project mutation automatically at install time and persists it through an injected build plugin. Its reviewer-directed discussion of prior...

The automatic postinstall path modifies project AI-agent permissions and removes its own npm evidence afterward. This is a concrete install-hook abuse chain even though no direct secret e...

The automatic lifecycle hook broadly mutates a consumer project, and the injected build plugin enforces those mutations by discarding later edits. This is concrete install-hook abuse desp...

This is an unconsented install-time remote-code-execution chain that can broadly alter the host outside the reviewed package contents. The guards reduce accidental execution but do not ma...

The package has a concrete automatic lifecycle path that overwrites and prunes a consumer-wide AI-agent control directory. Local-only execution does not remove the control-hijack risk.

This package performs unconsented, destructive postinstall mutation of a consumer project and persists control through an injected build plugin. That behavior is not necessary for a libra...

The package automatically executes unpinned remote shell code and alters a separate home-directory AI-related tool during postinstall. This is a concrete unconsented install-hook abuse pa...

This is unconsented install-time command execution and host-data exfiltration to a third-party endpoint. The import-time trigger reinforces the malicious lifecycle behavior.

An automatic preinstall hook launches a deliberately obscured payload with concrete credential and outbound automation capabilities. This is malicious install-hook abuse.

This is a concrete malicious install-time chain: an automatic lifecycle hook executes an opaque payload with credential, network, filesystem, and process capabilities unrelated to the sta...

The automatic preinstall hook executes a deliberately concealed, capability-rich payload. This is concrete install-hook abuse, not package-aligned setup.

The automatic preinstall execution of concealed credential- and network-capable code is concrete malicious install-hook behavior. Readable CLI functionality and the package-aligned spec c...

The package contains an automatic postinstall path that mutates a foreign, user-wide AI-agent configuration and installs agent skills. This is concrete unconsented install-hook abuse unde...

The automatic lifecycle hook makes destructive and account-provisioning changes to a user-level AI-agent control surface. This is unconsented install-hook abuse, despite the vendor-aligne...

This is concrete, unconsented install-time data exfiltration to external endpoints. Reviewer-directed claims that the behavior is benign do not change the executable behavior.

The automatic global updater, enabled lifecycle scripts, and runtime self-dependency form a concrete unconsented supply-chain execution path. The narrow permission-repair hook does not of...

The package combines an automatic install hook with persistent global AI-agent instruction injection and coercive tool-use rules. This is concrete install-hook abuse, not an explicit user...

The package combines automatic lifecycle execution, host telemetry, remote executable installation, privilege-invoking system changes, and reviewer manipulation. These behaviors establish...

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces plus background home-directory repository indexing. The lifecycle-triggered persistence chain meets th...