npm malware reports, with evidence.

This is an obfuscated, remotely controlled redirect hidden behind a verification page, not a legitimate npm package function. Although it has no install hook, opening its declared entrypo...

The automatic postinstall hook broadly mutates a foreign consumer project and installs a plugin that restores overwritten source files. This is concrete install-hook abuse under the state...

This is concrete install-hook abuse: automatic installation rewrites the consuming project's lifecycle configuration and changes agent plugin state. The behavior is persistent and runs wi...

Although its automatic hook only initializes package-owned configuration, the package contains a direct, functional third-party entitlement and gate-bypass capability. That concrete tampe...

This package is a disguised browser redirector with encrypted, server-selected payload delivery. The absence of npm lifecycle hooks does not neutralize the concrete malicious behavior exe...

The package embeds an active service-worker proxy application in an SVG declared as its npm entry point. Its automatic scope-wide request interception and externally configured traffic re...

The public library entry is benign, but the included t.js contains an executable, targeted account-takeover workflow. Its lack of automatic npm execution reduces exposure but does not neu...

This is concrete unconsented install-time persistence across operating systems, reinforced by deliberate process-name evasion. The absence of a self-dependency does not neutralize this li...

The complete lifecycle path automatically and silently modifies global instruction files for three unrelated AI-agent tools, then injects directives that influence future sessions. This i...

The automatic postinstall hook mutates a foreign AI-agent control surface and installed dependencies, then can execute another install script with inherited environment variables. This is...

The automatic postinstall hook performs broad dependency replacement and removes debugging artifacts. That is concrete install-hook abuse, regardless of the absence of a confirmed externa...

This is a concrete install-hook abuse chain affecting the consumer's files and Git remote. The editor settings are benign-looking, but they do not justify destructive deletion, commit, an...

The automatic postinstall hook performs a concrete, broad process-control action against running agent bridges. It does not need credential theft to create an unconsented install-time con...

The automatic lifecycle trigger, deliberate obfuscation, broad agent-skill replacement, and telemetry form a concrete malicious install-hook chain. The commerce functionality does not jus...

The package contains a concrete import-time protestware payload that disrupts selected users and fetches unsolicited remote media. The lack of an install hook does not remove the runtime...

This is an unconsented postinstall mutation of a broad, foreign AI-agent control surface. The automatic hooks create recurring package execution and prompt/session influence, meeting the...

This is a concrete automatic install-hook abuse chain: lifecycle execution, opaque native payload execution, and mutation of foreign AI-agent integrations. The downloader has no integrity...

The automatic postinstall path persistently mutates global Claude Code control files and registers future command execution without installation-time consent. This meets the install-hook...

This package has no legitimate need to modify a consumer project to provide ANSI formatting. The automatic, deceptive postinstall write is concrete install-hook abuse.

The package automatically installs persistent Claude Code hooks and a controlled skill during npm postinstall, while explicitly bypassing prompts when unattended. That is concrete install...

The automatic postinstall mutates two foreign AI-agent configuration areas and user dependencies. The copied content adds command delegation and credential-backed network capability, form...