npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms tailwindcss-contact-forms@0.6.2 as malicious (MAL-2026-16124): Malicious code in tailwindcss-contact-forms (npm)

Automatic postinstall mutation of global Claude Code hooks, permissions, and MCP configuration is a foreign and broad AI-agent control-surface change. The same lifecycle path also refresh...

This is an unconsented install hook that fetches executable payloads and performs broad host package-manager mutation. The absence of visible credential theft does not mitigate the concre...

This is an automatic install-hook payload chain that downloads and executes unverified native code and mutates host software outside the npm package directory. Although no credential thef...

This is a concrete automatic postinstall mutation of a broad, foreign AI-agent control surface. The mutation is persistent and causes future Claude Code sessions to load instructions and...

This package performs concealed, non-user-invoked changes to a consumer's WhatsApp account and transmits a stable device fingerprint to its operator. The behavior is automatic at runtime...

This is an unconsented postinstall mutation of a foreign consumer project's AI-agent control surface and related execution hooks. The behavior meets the install-hook-abuse publish-block b...

The package performs an unconsented external runtime installation during postinstall, creating a supply-chain execution path outside npm's declared dependency set. The pinned version and...

This is an automatic remote-native-code execution chain with no independent payload authentication. The installer also weakens macOS execution protections for that remote payload.

This package performs unconsented install-time host mutation through privileged package-manager commands and repeats it at runtime. Its additional credential harvesting and network use ma...

The bridge combines deliberate evasion with an unrestricted AI-agent launcher, and the distributed code is intentionally obscured. The absence of a consumer lifecycle hook limits installa...

The package contains a concrete automatic postinstall chain that overwrites another product's UI files. This meets the install-control-surface blocking rule even though no credential thef...

This is unconsented install-time mutation of a consumer project’s AI-agent control surface and package manifest. The lifecycle hook makes the behavior automatic and broad enough to requir...

The concrete lifecycle chain mutates consumer package-manager settings and broad AI-agent control files, then suppresses review of those generated files. This meets the install-hook abuse...

The automatic lifecycle hook broadly mutates foreign AI-agent skill locations and executes another package’s global installer. The global-only guard does not establish consent for this cr...

This is an automatic lifecycle-based remote native payload installer that disables TLS verification and has no visible integrity validation. The later launcher execution completes a concr...

The automatic postinstall and startup paths perform unconsented host-level package installation, including sudo attempts. This is concrete install-hook abuse; credential discovery adds ma...

The source establishes automatic postinstall mutation of multiple unrelated AI-agent configuration surfaces, including default activation of a Codex plugin and MCP server. This is concret...

The package has an automatic postinstall chain that mutates foreign AI-agent configuration and registers executable MCP tooling. The global-install guard does not provide explicit user co...

This is a concrete automatic lifecycle chain that executes an unverified native payload and installs hooks into foreign AI-agent environments. It meets the install-hook abuse publish-bloc...