npm malware reports, with evidence.

The sole npm entrypoint is an obfuscated remote challenge-and-redirect page, not package functionality. Its concealed request and automatic redirect constitute concrete malicious behavior.

The package's only entrypoint is a heavily obfuscated challenge-and-redirect page with a concealed remote host resolution flow. Its random package identity and lack of legitimate library...

The package contains a concealed browser-redirect mechanism behind a challenge-themed page, which is concrete deceptive behavior. Although it has no install hook, the active entrypoint is...

The package implements an automatic install-time reconnaissance and external callback chain. Its research labels do not establish consent for this behavior.

Automatic lifecycle execution performs unsolicited host and project reconnaissance and transmits it externally. The package's research claim does not remove this concrete install-time exf...

Automatic install-time host reconnaissance and covert transmission to hard-coded external endpoints are concrete malicious behavior. Error suppression and a DNS fallback reinforce the int...

The source implements deceptive process disguise, persistence, covert screen capture, and external transmission rather than the advertised DOM diagnostic function. These concrete behavior...

Automatic lifecycle execution combines local data collection with outbound transmission to unrelated collectors. This is malicious install-hook data exfiltration.

The package performs an unconsented, remotely controlled account mutation through its normal runtime entrypoint. This is concrete malicious behavior and warrants blocking publication.

The package uses automatic install hooks solely to make an external request to an unrelated endpoint. Although no credential theft or local mutation was found, this is concrete unsolicite...

This is a concrete install-time reconnaissance and data-exfiltration path to an unrelated fixed endpoint. It is malicious install-hook abuse, not package-aligned setup.

This is a concrete automatic postinstall chain that modifies a consumer project's lifecycle configuration and broad AI-agent control surface. The absence of observed network or credential...

This package embeds an import-time backdoor that overwrites a foreign dependency and remotely directs authenticated newsletter follows. The absence of an npm lifecycle script does not rem...

The package contains a concrete import-time backdoor that mutates a third-party dependency and remotely directs authenticated account actions. The absence of an npm lifecycle hook does no...

The automatic lifecycle hook contains a remote interactive-shell pattern and external data-posting command. This is malicious install-hook abuse.

This is an unconsented postinstall mutation of foreign AI-agent control surfaces with persistent command hooks. The qualifying guards do not remove the automatic lifecycle trigger.

The automatic postinstall mutates a foreign consumer project's Copilot control surface and installs command hooks for later agent events. This is concrete install-hook abuse under the iso...

Automatic postinstall mutation of foreign AI-agent dependencies and removal of source maps create a concrete malicious install-hook attack surface. The later session uploader reinforces t...

The lifecycle hook directly activates destructive replacement of user-level AI-agent skills. This meets the install-control-surface blocking policy regardless of the package's other CLI f...

This is concrete install-hook abuse: an npm postinstall reaches package code that writes AI-agent configuration and execution hooks into the consumer repository. The absence of observed n...

The active command contains explicit hidden elevation, antivirus exclusion, security-policy disablement, remote binary download, and execution. These actions are unrelated to normal CLI i...