npm remote execution reports, with evidence.

This is an unverified remote-code launcher over HTTP with automatic update behavior and an external-package fallback. Although it lacks an install hook, the explicit CLI invocation create...

The hidden phrase-based privilege elevation, unauthenticated proxy route, and unrestricted command runner form a concrete remote agent-control chain. The lack of an install hook does not...

The package contains a concrete, automatic remote-code-execution path rather than merely an optional documented installer command. Its install hook also forcefully repairs a dependency an...

The published runtime bundle contains an opaque remote-code execution chain disguised as a benign worktime command. This is a concrete attack surface, not merely a network client or a use...

The package combines external AI-controlled command execution with disclosure of a GitHub token to a non-GitHub endpoint. Install hooks and a detached global updater further expand the un...

This is a concrete remote-code-execution path in the embedding browser, not merely a network request. Although it has no install hook or local secret harvesting, executing opaque provider...

This is an automatic lifecycle-driven remote code execution chain with broad machine mutation. Checksum verification of artifacts does not protect the separately piped remote script or pi...

The reviewed package creates an automatic install-time remote code-execution chain from mutable GitHub content and weakens macOS execution protection. The skip conditions do not remove th...

The explicit join flow combines server-controlled shell commands with collection and upload of full terminal interaction. This is a concrete remote-code-execution and data-exfiltration ca...

The package contains a complete automatic remote-code acquisition and dynamic-execution path on normal CLI use. Integrity validation does not mitigate the unpinned trust in mutable regist...

The sole install-time script is an explicit reverse-shell command with external output forwarding. This is concrete malicious behavior activated without user interaction beyond installation.

This is a concrete install-hook remote-code-execution chain: automatic postinstall downloads and executes shell scripts, then modifies the user's global tool and skill environment. The gu...

The import-time loader combines remote payload execution, detached process creation, and self-removal. These behaviors are concrete malicious execution, even though npm lifecycle hooks ar...

This is a concrete import-time remote code execution chain concealed in unrelated glob-matching code. The absence of an install hook does not mitigate execution when an application import...

Although no install-time hook runs, the published MCP tools expose an active chain for credential attempts, license forgery, and privileged remote modification of arbitrary caller-selecte...

This is concrete import-time remote code execution with a detached child process and self-removal behavior. The absence of an npm lifecycle hook does not mitigate execution through the co...

This is an unpinned remote-code-execution supply-chain path, not merely content retrieval. No npm install hook is present, but runtime execution of downloaded latest-version Python is con...

This is a concrete remote payload delivery path into broad AI-agent skill control surfaces, activated automatically when the gateway starts. The absence of an npm lifecycle hook does not...

The package contains concrete remote-code-execution and automatic transcript-upload behavior. Although neither occurs at npm install time, the lack of installer verification and automatic...

The package contains a concrete runtime code-execution sink plus concealed machine-targeted behavior. Although it has no install hook, the exposed runtime path presents a material host-co...

This is a concrete persistent remote payload mechanism: a locally installed launcher automatically downloads and executes later package code. It is not an npm install lifecycle hook, but...