npm malware reports, with evidence.

The automatic lifecycle hook contains a remote interactive-shell pattern and external data-posting command. This is malicious install-hook abuse.

This is an unconsented postinstall mutation of foreign AI-agent control surfaces with persistent command hooks. The qualifying guards do not remove the automatic lifecycle trigger.

OpenSSF Malicious Packages via OSV confirms @insiderintelligence/googleadmanager@9.9.10 as malicious (MAL-2026-16290): Malicious code in @insiderintelligence/googleadmanager (npm)

The automatic postinstall mutates a foreign consumer project's Copilot control surface and installs command hooks for later agent events. This is concrete install-hook abuse under the iso...

Automatic postinstall mutation of foreign AI-agent dependencies and removal of source maps create a concrete malicious install-hook attack surface. The later session uploader reinforces t...

The lifecycle hook directly activates destructive replacement of user-level AI-agent skills. This meets the install-control-surface blocking policy regardless of the package's other CLI f...

This is concrete install-hook abuse: an npm postinstall reaches package code that writes AI-agent configuration and execution hooks into the consumer repository. The absence of observed n...

The active command contains explicit hidden elevation, antivirus exclusion, security-policy disablement, remote binary download, and execution. These actions are unrelated to normal CLI i...

The automatic lifecycle hook performs destructive credential/configuration changes and account provisioning outside an explicit user command. This is concrete install-hook abuse, not ordi...

The automatic postinstall and startup paths execute privileged system mutations and unpinned tooling without an explicit user command. The behavior is concrete install-hook abuse, not mer...

This is concrete install-hook abuse: an automatic postinstall downloads and persists opaque executable code that the package later runs. Same-source checksum validation does not bind the...

The package uses an automatic postinstall hook to install external system software, including privileged package-manager commands. That concrete install-hook behavior exceeds ordinary dep...

The automatic lifecycle hook mutates downstream package-manager configuration and installs package-controlled AI-agent instructions and skills into the consumer project. This meets the po...

The package contains a concrete automatic install-time remote native-code delivery path with certificate verification disabled and no integrity verification. This is unsafe executable pay...

This is an unconsented postinstall mutation of a foreign consumer project's application and build control surface, with persistence through a package-injected plugin. The behavior meets t...

The command entrypoint contains explicit, elevated security-control tampering followed by remote binary execution. This is concrete malware behavior even though it is triggered by CLI use...

The automatic postinstall hook persists a wildcard command into the consumer's Claude configuration. This meets the install-time AI-agent control-surface abuse blocking policy.

The complete automatic lifecycle path downloads remote content and writes it into broad AI-agent directories, while also deleting local agent-related state. This is concrete install-hook...

The package performs automatic remote code execution during postinstall and uses the resulting opaque binary to modify Claude Code hooks and settings. This is a concrete install-hook abus...

This is an unconsented postinstall chain that executes a mutable remote payload and mutates an AI-agent control surface. The combination is concrete install-hook abuse rather than ordinar...