npm malware reports, with evidence.

This is a concrete, default-enabled remote self-update and profile-mutation chain. It can replace the running plugin with attacker-controlled code from the configured update infrastructure.

The automatic postinstall hook performs unconsented mutation of foreign AI-agent skill directories and installs additional dependencies. This is concrete install-hook abuse, not merely us...

This is an automatic install-time chain that executes an opaque native payload to configure external AI agents. The package's release download is not integrity-pinned, increasing the risk...

The automatic lifecycle chain executes an opaque native binary that installs external AI-agent hooks and changes Codex configuration. This is concrete unconsented install-hook abuse, rega...

This release performs an unconsented install-time deletion of another named AI coding binary and forms a remote executable delivery chain. Although no credential theft is visible in the J...

This is a concrete automatic install-hook chain that executes an opaque native installer against AI-agent control surfaces. The binary's embedded unsafe agent commands make the resulting...

This is a concrete automatic install hook that retrieves and executes an unauthenticated native payload, then requests agent-hook installation. That combination is malicious install-hook...

This is concrete unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The cross-platform fan-out and automatic installation meet the install-hook abuse blocking p...

The automatic lifecycle hook broadly changes AI-agent configuration and instruction directories across multiple vendors. This matches install-hook abuse even though no network exfiltratio...

This is an automatic, obfuscated install hook that downloads and executes unverified native code from a remote host. Its dependency-repair purpose does not remove the install-time remote-...

The package contains concrete, automatic install-time host mutation and network download behavior. Although the implementation is readable and no credential theft was found in the inspect...

The installer performs unconsented network retrieval and execution during npm postinstall, including a remote shell installer and remote skill distribution. This is a concrete install-hoo...

The package performs broad consumer-project AI-agent configuration and hook mutation from postinstall rather than through an explicit user command. This meets the install-hook abuse block...

The automatic lifecycle script mutates broad AI-agent and repository control surfaces in a consumer project. This meets the install-hook abuse blocking policy despite no observed exfiltra...

The package performs an unconsented postinstall mutation of a foreign, broadly available AI-agent control surface. The absence of credential theft does not neutralize that concrete instal...

The automatic postinstall mutates foreign AI-agent control surfaces and adds persistence through Git hooks. This is concrete install-hook abuse even though no automatic network exfiltrati...

The package covertly injects third-party newsletter metadata into every prepared image and video message. The benign Node-version preinstall check does not mitigate this runtime content m...

The automatic lifecycle hook establishes a concrete AI-agent control-surface mutation chain through an opaque native binary. This meets the install-hook abuse blocking policy even though...

The automatic lifecycle hook executes opaque remote code from a mutable branch, creating a concrete remote-code-execution supply-chain path. Skip guards do not protect normal global insta...

The automatic postinstall invokes an opaque native binary to modify Codex and Claude Code hooks. That is a concrete unconsented install-time AI-agent control-surface mutation.

This is an automatic install-hook remote-code-execution chain, not a transparent bundled installer. The local skip guards do not mitigate execution of mutable remote code during the opted...