npm malware reports, with evidence.

This package automatically installs an opaque native payload from an unauthenticated remote endpoint and later executes it. The absence of integrity verification makes the install hook a...

The automatic lifecycle hook modifies broad AI-agent configuration and promotes project permissions globally without obtaining consent through an explicit setup command. This is concrete...

This package performs unconsented install-time and runtime host package installation, including sudo attempts, and automatically reuses third-party agent credentials. Those concrete behav...

This is a concrete automatic install-time payload chain: obfuscated code downloads and detaches a remote executable. The behavior is unrelated to the package's stated API-wrapper role.

The inspected source establishes automatic install-time mutation of consumer lifecycle and agent settings, including persistence through package.json. This meets the blocking boundary for...

The lifecycle hook automatically installs and prunes agent skills in both Codex and Claude user configuration trees. This meets the policy threshold for malicious install-hook abuse despi...

This package contains an automatic, deliberately obfuscated installer that conditionally downloads and executes an external binary. That is a concrete malicious install-hook chain unrelat...

The automatic lifecycle hook performs obfuscated remote payload download and detached execution, which is concrete malware behavior. The normal-looking Roblox wrapper code does not mitiga...

The package has a concrete automatic postinstall chain that mutates a broad AI-agent control surface and registers persistent session-start execution. This meets the install-hook abuse bl...

This is a concrete automatic install-time persistence chain combined with silent system dependency installation. Its Windows-only scope and local watchdog target do not make the unconsent...

This is a concrete postinstall chain that installs a native payload and uses it to alter third-party AI-agent hooks. The behavior meets the install-hook abuse block policy despite package...

The package contains deliberate, top-level, targeted browser disruption in both published entrypoints. Although it has no install hook, its import-time protestware behavior is concrete an...

This is a concrete automatic install-time remote code delivery path with certificate verification disabled and no payload integrity check. The postinstall also mutates hidden asset links,...

This package performs concrete, unconsented postinstall persistence and silent software installation on Windows. The behavior is automatic rather than an explicit user setup command.

The package has a concrete automatic lifecycle chain that deletes files and installs remotely obtained skills across multiple AI-agent directories. This meets the install-hook abuse block...

Direct inspection confirms an automatic preinstall hook that fingerprints the host and exfiltrates the values over HTTP. This is concrete malicious install-hook abuse.

The package performs unconsented install-time system mutation and later automatic command execution and external control-surface writes. The absence of observed secret theft does not remo...

This is an automatic lifecycle remote-code delivery chain, not a transparent package-only CLI installation. The downloaded payload is not independently pinned or reviewable, and the packa...

This is unconsented postinstall mutation of a foreign AI-agent control surface, combined with broad deletion in the user's Claude command directory. The automatic native download further...

This is an automatic remote-native-payload bootstrap whose trust decision is controlled by the payload source itself, followed by execution of the resulting binaries. That install-to-exec...

The package performs unconsented install-time mutation of foreign dependency code and removes source maps afterward. This is a concrete install-hook abuse pattern even though the hook its...