npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms htps-provider@1.0.11 as malicious (MAL-2026-15567): Malicious code in htps-provider (npm)

This is concrete install-hook abuse: an npm postinstall mutates the foreign Codex control surface and executes remote shell content. The relay-driven bypass retry materially increases the...

The package has a concrete automatic install-time persistence mechanism that mutates a foreign project and causes ongoing external reporting. The absence of direct token transmission does...

The package combines an automatic lifecycle hook, broad host-agent configuration writes, injected agent instructions, and runtime self-updating through a fresh global install. The global-...

This is a concrete, unconsented postinstall modification of a foreign GitHub Actions control surface with network behavior. It meets the install-hook abuse blocking policy.

The automatic postinstall and normal startup paths modify dependencies and the host system, including privileged package-manager attempts. The package also automatically maintains hooks i...

The package has an automatic install-time hook that installs and executes a separate Python artifact in the user's home directory. That unconsented external payload installation is concre...

The install hook silently writes a persistent workflow into a foreign project and causes future third-party reporting. This concrete install-time mutation is malicious behavior.

This is unconsented install-time mutation of a foreign AI-agent control surface, with remote shell execution and subsequent automatic agent-message injection. The global-install guard red...

The package performs an automatic postinstall global installation of an AI agent CLI and later defaults that agent layer to reduced approval safeguards. This meets the install-hook abuse...

The automatic lifecycle hook performs unconsented multi-agent configuration mutation and enables a Codex plugin. This meets the install-hook abuse blocking policy despite no confirmed exf...

This is an unconsented postinstall mutation of broad AI-agent control surfaces in the consuming project, combined with an automatic networked self-update path. The source establishes conc...

This is an automatic lifecycle-delivered native payload chain that deliberately evades platform download protections and persists through per-user desktop integration. The local hash chec...

The package uses postinstall to mutate a foreign global agent plugin and configuration surface, then installs a plugin that starts detached background execution. This meets the install-ho...

The code contains a concrete account-takeover primitive disguised as optimization functionality. Although it is not install-time behavior, the deceptive exported routine is malicious.

The package has an automatic postinstall hook that silently overwrites a third-party OAuth callback page. Although the source shows no direct exfiltration, this is an unconsented authenti...

The complete automatic lifecycle path modifies both package-manager behavior and multiple foreign AI-agent control files, then suppresses review of those files. The package also contains...

The automatic lifecycle chain deliberately weakens package-manager protections, writes broad agent-control files, and suppresses review of those files. No network theft is needed for this...

The automatic postinstall writes package-controlled AI-agent content into the consumer project. This meets the policy threshold for unconsented lifecycle control-surface mutation.

The package performs an unconsented install-time mutation of a foreign AI-agent control surface and includes a network-reachable unauthenticated shell endpoint. These are concrete high-im...

Automatic postinstall mutation of external AI-agent control surfaces is a concrete install-hook abuse path. The same hook also changes host configuration and bootstraps a remotely release...