npm remote execution reports, with evidence.

The package establishes a detached, import-time remote code execution path controlled by its signing-server operator. Its scanner-directed claim that signatures eliminate malware risk fur...

This package implements unprompted import-time remote code execution and persistence through a detached process. Signature verification does not remove the remote operator's ability to de...

Although installation has no automatic registry lifecycle hook, the package combines deliberate obfuscation with remote-controlled shell execution in its normal runtime path. This is a co...

This is not an automatic lifecycle attack, but the explicit installer creates persistent Claude Code hooks from remotely fetched, obfuscated code. The remote payload execution path warran...

This is concrete remote code execution on import from a hard-coded package-controlled endpoint. Signature verification authenticates the operator's payload but does not make arbitrary rem...

The package embeds and executes concealed code at import time while actively resisting inspection. That is a concrete arbitrary-code execution surface, not transparent package functionality.

This package automatically stages remotely controlled native binaries during installation and executes them later. Same-origin checksum metadata does not provide independent integrity pro...

The package contains a concrete remote-code-execution path hidden behind an unrelated worktime command. Although it is not install-triggered, directly executing an opaque remote payload i...

Although installation itself only displays a message, explicit package commands fetch and execute opaque remote shell content in the consumer project and install server-provided AI contro...

This is an active remote payload path into an AI agent, not merely a documented local integration. The absence of an npm lifecycle hook reduces install-time risk but does not remove the r...

The package contains an automatic, obfuscated remote-code loader in both primary entry points. Although no install hook exists and the URL suggests a formatter dependency, the import-time...

The package combines automatic lifecycle execution with unvalidated remote AI command execution in the user's shell. This is a concrete remote-code-execution attack surface, not merely or...

The exposed web API provides a direct, unauthenticated path from a remote request to child-process execution. The conditional unverified executable download and automatic later execution...

The package contains concrete remote-code-execution and credential-forwarding behavior that is activated by its advertised command. Lack of an install hook reduces automatic reach but doe...

The exported hidden-SVG evaluator is a concrete arbitrary-code-execution capability and is not needed for SVG processing. Although it has no install hook or observed exfiltration, its del...

This is an automatically activated remote-control and data-upload channel, coupled with unauthenticated-by-source remote replacement of the package. The absence of an npm lifecycle hook d...

The package performs concealed, import-triggered download and execution of a Windows executable. The absence of an npm lifecycle hook does not mitigate this runtime arbitrary-code-executi...

The package has a concrete unconsented remote native-code execution path at normal startup. This exceeds ordinary agent functionality and creates a supply-chain payload channel.

The package contains a complete automatic remote-payload execution path, not merely an optional download helper. Its default stealth-browser deployment gives an external latest-release ar...

This is an automatic install-time remote code staging chain with later execution, not merely a user-invoked CLI action. The narrow .bohr destination and lack of secret harvesting reduce s...

The package automatically downloads and executes an unverified native payload during ordinary startup. This is a concrete remote-code-execution supply-chain path, despite no confirmed cre...