Malicious packages, on record.

This is concrete malicious install-time behavior: it modifies Windows security controls and creates concealed privileged remote access. Lack of observed exfiltration does not mitigate the...

The package performs an unconsented elevated postinstall chain that weakens RDP security, creates hidden privileged access, and disguises persistence. No exfiltration endpoint is needed f...

The postinstall hook performs privileged, unconsented remote-access configuration and persistence with explicit camouflage and hiding behavior. These source facts support a block independ...

This is concrete unconsented postinstall host compromise behavior, not a package-aligned setup action. No network exfiltration is needed for the package to establish stealthy privileged r...

The install-time behavior is unconsented and materially changes host authentication and network exposure. The absence of outbound JavaScript networking does not mitigate the local backdoo...

The install-time hook performs concrete privileged persistence and remote-access weakening, not merely a user-invoked administrative utility. No exfiltration endpoint is needed for this h...

Concrete postinstall behavior creates a hidden privileged remote-access path and weakens RDP security. This exceeds a benign installer’s expected scope and is executed automatically on in...

The install hook performs unrelated host-data collection, external-path mutation, and detached-process creation without user consent. These concrete install-time behaviors warrant blockin...

Source directly confirms an automatic elevated postinstall chain that creates hidden privileged RDP access and weakens RDP security. Lack of exfiltration does not mitigate the concrete re...

Direct source inspection confirms unconsented install-time mutation of a consumer CI control surface and a persistent external reporting path. The browser bundle's Firebase traffic does n...

The package’s proxy behavior is plausible, but automatic daemon startup and login persistence during postinstall are concrete harmful behavior outside an explicit user action.

The package performs concrete, cross-platform login persistence from postinstall, rather than only when a user invokes its CLI. Its background server also binds broadly by default, increa...

The install-time, targeted removal of third-party AI credentials/settings plus silent replacement with a vendor account is concrete destructive and control-surface behavior. This exceeds...

The guarded postinstall migration is narrow, but the runtime startup path contains confirmed unattended self-update behavior and destructive deletion of a foreign AI-agent configuration f...

This is concrete stealth persistence and unconsented runtime package installation, not a normal explicit update command. The hard-coded telemetry destination compounds the risk.

This is a concrete, automatically triggered persistence and unattended remote-update chain, not a normal user-invoked update command. Absence of an npm lifecycle hook does not mitigate th...

The package performs unconsented install-time mutation of a foreign repository's privileged CI and release surface. This creates a concrete supply-chain persistence and publishing path de...

The delayed import-time network fetch and hidden remote-config write are concrete, nonessential attack behavior. No lifecycle hook is required because normal module use triggers it.

The package implements an unconsented install-time persistent marker specifically intended to invisibly alter its MCP output. Obfuscation of the distributed runtime further prevents norma...

The package establishes a persistent system service during postinstall and hides the implementation with heavy obfuscation. This is concrete malicious install-time persistence.