npm malware reports, with evidence.

The package combines an automatic install hook, broad consumer-project and Claude plugin mutation, and a self-dependency selecting older releases. These concrete behaviors meet the instal...

This is an automatic staged remote-code-execution chain at npm postinstall, with no embedded trusted digest or signature for the fetched payload. The absence of visible credential theft d...

The package has a concrete automatic install-hook chain that changes global Claude agent behavior and executes package hooks. This meets the install-hook abuse blocking policy despite its...

Automatic lifecycle execution of mutable remote shell code creates a concrete install-time remote-code-execution path. The local opt-outs and same-source checksum checks do not constrain...

The package performs automatic, persistent mutation of the consumer project's lifecycle and AI-agent configuration. This meets the install-hook abuse blocking policy even though no secret...

The package has a concrete automatic postinstall chain that modifies foreign AI-agent configuration and enables a plugin. This meets the install-hook abuse boundary despite no observed se...

The package performs broad, automatic mutation of a consuming project and persists control over its entry files through an injected build plugin. Reviewer-directed prompt-injection langua...

The package performs unconsented privileged-capable system mutation from an automatic install hook and repeats it on ordinary execution. This is a concrete install-hook abuse path, not me...

This is an unconsented install-time mutation of broad consumer project and AI-agent control surfaces, with durable execution paths added to later installs and Git operations. The behavior...

This is concrete unconsented postinstall mutation of a broad AI-agent control surface. The lifecycle hook persists package-controlled commands and instructions globally, meeting the insta...

This is an unconsented postinstall mutation of broad project and AI-agent control surfaces, reinforced by detached lifecycle reconciliation. No secret theft was found, but the automatic c...

This is a complete automatic lifecycle and self-dependency chain that broadly mutates a foreign AI-agent control surface. The OAuth implementation does not neutralize the unconsented pers...

The package performs unconsented postinstall mutation of a consumer project and AI-agent control surfaces. This is concrete install-hook abuse even though no secret theft was found.

This is concrete unconsented postinstall mutation of consumer and AI-agent control surfaces, combined with cache deletion and global command installation. The behavior exceeds package-loc...

This is an unconsented postinstall mutation of a broad AI-agent control surface: it shadows Claude and Codex commands, persists scheduled jobs, and self-updates. The global-install guard...

The automatic lifecycle hook executes an opaque binary that modifies shared AI-agent configuration and can overwrite user assets. This meets the install-hook abuse boundary even without e...

The package implements unconsented postinstall mutation of consumer-project and user AI-agent control surfaces, including third-party plugin installation. This meets the install-hook abus...

The automatic global postinstall performs broad foreign AI-client configuration mutation and installs backend-directed native code without integrity verification. Its persistence mechanis...

This package combines an automatic install lifecycle with broad AI-agent command interception, persistence, a default remote target, and automatic self-updating. These are concrete instal...

The automatic lifecycle chain executes an opaque native installer that modifies agent integrations, and the bundled binary contains an unsafe Codex bypass command. This satisfies install-...