npm persistence and destructive behavior reports.

The package performs destructive, broad consumer-project mutation from an automatic install hook. This is a concrete unconsented install-time attack surface even though the inspected hook...

The package contains concrete, automatic destructive behavior against containers it does not own. The narrow name filter does not establish ownership or consent.

The hard-coded removal of a purported competitor is destructive behavior, and the automatic patch configuration deliberately disables multiple agent control protections. No install hook e...

This package performs consequential SSH key, remote authorized_keys, local SSH configuration, dependency-installation, and background-process changes automatically during npm installation...

This is concealed remote-controlled account mutation in the default runtime path, not a requested library feature. The benign Node-version preinstall check does not mitigate it.

This package performs concealed, automatic actions on a user's external messaging account and phones home with a machine-derived fingerprint on normal use. The install hook is not the pri...

The package has no npm lifecycle hook, but its declared main entrypoint performs unconsented browser-side persistence and ships an obfuscated remote loader. This is concrete malicious beh...

The source implements a deliberate sandbox escape through launchd and is paired with an automatic install hook. Token gating limits exposure but does not neutralize the permission-bypass...

The source implements a covert persistent identifier and invisible response watermarking. Although it has no automatic npm lifecycle hook or confirmed exfiltration endpoint, the behavior...

The package contains a concrete automatic destructive action against consumer dependencies. No source evidence justifies this install-time deletion.

The package contains an unconsented postinstall action that invokes a native logout operation and mutates user authentication state. This is concrete destructive install-hook behavior, no...

The source implements a deliberate, reachable macOS sandbox escape through launchd. Its local postinstall notification does not remove the concrete runtime bypass.

This is a remotely controlled, broad destructive operation disguised as cache cleanup. Its explicit invocation requirement reduces automatic exposure but does not make the behavior safe o...

The implementation's unrestricted recursive deletion contradicts its cache-cleanup description. The remote authorization gate adds covert control over a destructive payload.

This package presents itself as cache cleanup but implements remote-controlled deletion of an entire project directory. The explicit-call requirement reduces automatic exposure but does n...

This is a destructive payload disguised as cache cleanup: it removes arbitrary project contents after remote authorization. The absence of an install hook limits automatic execution but d...

The automatic lifecycle hook performs a concrete destructive action by logging out the user and executes opaque native code. Although the binary appears aligned with a Tencent Meeting CLI...

The runtime cleanup contains a concrete broad destructive action that is not limited to package-owned processes. The scanner-addressed comment reinforces malicious intent, while the posti...

Direct inspection confirms an automatic install hook establishing hidden, elevated at-logon persistence and a daemon restart loop. No external exfiltration was found in the reviewed persi...

The package embeds concealed remote license enforcement that can destroy a consumer application's visible DOM at runtime. This is concrete destructive behavior, despite the absence of ins...

This is a concealed, remotely controlled kill switch in a browser component, protected by deliberate obfuscation. It has no install-time hook or secret harvesting, but the concrete remote...