npm malware reports, with evidence.

This is concrete concealed install-hook abuse, not a user-invoked setup flow. The lifecycle hook triggers process creation, persistent user-home changes, and SSH activity without consent.

The source directly contradicts the postinstall dry-run claim: the invoked helper takes its full server-start and SSH path. The deliberate concealment and automatic lifecycle execution es...

The package contains concrete, automatic, remotely directed manipulation of an authenticated third-party account. Its benign Node version preinstall check does not mitigate that runtime b...

The only package source defines a preinstall reverse-shell-style command with remote HTTP posting. This is concrete malicious install-hook behavior.

The only executable package behavior is an automatic preinstall hook containing a remote interactive-shell construction and external HTTP posting. This is concrete install-time compromise...

The package has a concrete automatic install-time chain that writes broad AI-agent configuration and installs a command hook in the consumer project. This meets the install-hook-abuse blo...

The package embeds a reachable automatic account-mutation path controlled by a remote list. Its benign Node-version preinstall check does not mitigate that runtime behavior.

This is a concrete, remote-controlled, unconsented action on an authenticated user account. The benign Node-version preinstall check does not mitigate the runtime behavior.

The sole package source defines an automatic preinstall reverse shell, which is direct malicious install-hook behavior.

The package contains a concrete, automatic, destructive postinstall action against consumer dependencies. Its normal source does not justify that mutation.

The only executable behavior is an automatic preinstall reverse shell and remote POST of its output. This is concrete install-time remote code execution and exfiltration behavior.

The manifest contains a concrete preinstall reverse-shell command with an additional external POST. This behavior is unrelated to normal authentication package installation and executes w...

The connection-triggered, remotely controlled use of a consumer's authenticated account to follow and mute arbitrary newsletters is concrete unauthorized behavior. The lifecycle hook is b...

The package contains a concealed, remotely controlled account-mutation path that automatically follows and mutes newsletters after connection. This is concrete unauthorized behavior, not...

This is an automatic install-time dependency-confusion payload that fingerprints the consumer environment and exfiltrates it through attacker-configurable callbacks. Placeholder receivers...

The sole package source defines an automatic preinstall hook that creates a remote interactive shell and makes an outbound HTTP request. This is concrete install-time compromise behavior.

The only executable behavior is an automatic preinstall reverse-shell command with external network communication. This is concrete malicious install-hook abuse.

The automatic lifecycle hook broadly installs package-controlled skills and enables a plugin/MCP endpoint across unrelated AI-agent environments. This meets the install-hook abuse blockin...

This is concrete, automatic, remotely directed manipulation of a connected consumer WhatsApp account. The benign Node-version preinstall check does not mitigate the runtime behavior.

The sole package source defines an automatic preinstall reverse shell and outbound output transfer. This is concrete install-time remote code execution behavior.

Direct source inspection confirms automatic postinstall modification of a foreign AI dependency and recursive deletion of user agent state. This is concrete install-hook abuse, not merely...