npm malware reports, with evidence.

The package has a concrete postinstall hook that rewrites a foreign AI SDK OAuth callback page. This meets the install-control-surface block boundary despite the absence of shown secret t...

This is a concrete install-hook supply-chain mechanism, not a normal transparent setup step. It remotely replaces executable package code and package metadata during installation.

This is a covert proctoring-evasion and AI-assisted capture tool with persistence and a bundled credential harvester. Its harmless postinstall hook does not mitigate the malicious runtime...

This is an unconsented install-time chain that mutates broad third-party AI-agent control surfaces and host configuration while executing a remotely obtained binary. The combination meets...

The automatic postinstall performs non-interactive consumer-project mutation and persists itself by rewriting the consumer lifecycle script. The same apply path alters multiple Codex cont...

This package uses an automatic lifecycle hook to install external code globally and stage opaque remote executables for later execution without integrity verification. That is concrete in...

The package performs unconsented postinstall mutation of several external AI-agent control surfaces and bootstraps an unchecked executable. This is a concrete install-hook abuse chain, no...

The automatic lifecycle hook performs broad, persistent user-environment mutation and installs a separate AI-agent CLI without an explicit user command. This is concrete install-hook abus...

The package automatically installs an opaque native payload from a fixed IP with TLS verification disabled and makes it executable. Its postinstall also wires hidden agent-related assets...

This package contains an install-time path that can mutate a remote database's authorization state and consumer project files. The opt-in environment gate reduces accidental activation bu...

The automatic lifecycle chain downloads and executes a remote script by default, which is unconsented install-time remote code execution. This is concrete install-hook abuse, not merely a...

This is an unconsented postinstall mutation of a foreign, globally installed AI-agent control surface. The conditional check and opt-out do not make the automatic lifecycle mutation user-...

The package performs automatic postinstall mutation of foreign AI-agent configuration and starts third-party MCP tooling, including a path that forwards credentials. This meets the instal...

This is an unconsented postinstall mutation of a broad AI-agent control surface, with deletion and external MCP registration. The automatic global-install path is concrete in the publishe...

The package has a concrete automatic lifecycle chain that modifies a foreign global agent configuration and installs a persistent startup plugin. Source inspection found no need for remot...

The package performs concrete, unconsented persistence and broad AI-agent control-surface changes, then provides an automatic self-update path to another lifecycle-enabled release. These...

The lifecycle path performs broad, automatic project-level AI-agent configuration and establishes later hook execution. The absence of observed secret theft does not remove this concrete...

The automatic postinstall, runtime self-dependency on a different release range, broad consumer mutation, agent-control changes, and detached re-execution meet the lifecycle self-dependen...

This is an unconsented install-time mutation of broad AI-agent control surfaces combined with deliberate review suppression and secret-handling instructions. The behavior meets the instal...

The package performs unconsented postinstall mutation of a foreign AI-agent configuration and registers an executable server that accesses local credentials. This meets the install-hook a...