npm security reports, with evidence.

A default external endpoint receives account credentials through automatic recovery paths. This is concrete credential exfiltration behavior, not ordinary authentication to Facebook.

The reachable encrypted decrypt-and-require chain is a concrete hidden code-execution mechanism. Absence of an install hook does not remove the runtime execution risk.

The package uses an automatic npm lifecycle hook to alter several unrelated AI-agent instruction surfaces without a user command or consent. This meets the install-time AI-agent control-s...

The automatic lifecycle script installs a foreign AI-agent CLI and persistently changes user shell and application state. This concrete install-time control-surface mutation meets the blo...

This is active runtime prompt-based control hijacking, not inert documentation. Although there is no npm install hook, the package injects steering into an agent's system prompt when its...

The postinstall hook automatically mutates ~/.claude/skills and installs a remote executable. This meets the policy for malicious install-hook abuse of a foreign AI-agent control surface.

The automatic postinstall hook silently mutates foreign AI-agent control surfaces, meeting the install-hook abuse blocking policy. The unrestricted MCP request path adds a concrete condit...

The automatic lifecycle hook performs broad, forced mutation of the consuming project's Cursor and commit-control configuration. This meets the install-control-surface blocking policy des...

This is concrete unconsented postinstall mutation of foreign AI-agent control surfaces. The absence of observed credential theft does not neutralize the install-hook abuse.

This is an unconsented postinstall mutation of global AI-agent control surfaces. The automatic registration is concrete and sufficient for blocking under the launcher isolation policy.

This is a concrete automatic postinstall chain that writes foreign global AI-agent settings and prompts. It meets the install-control-surface blocking policy.

This is a concrete, unconsented postinstall mutation of broad third-party AI-agent control surfaces. The automatic hook and global configuration writes meet the install-control-surface bl...

This is concrete install-time mutation of a foreign AI-agent control surface combined with persistent user-environment and launcher changes. The behavior meets the blocking install-hook p...

This is a concrete, reachable arbitrary binary execution chain, not merely ordinary tunnel networking. The absence of an npm install hook does not mitigate the runtime remote-code-executi...

This is an automatic install-time remote native payload chain with disabled certificate verification. The payload is installed as an executable, creating a concrete supply-chain execution...

Automatic postinstall mutation of global Claude and Codex skill directories, coupled with an injected-task execution instruction, is a concrete AI-agent control-surface hijack. The absenc...

The automatic postinstall mutation of foreign AI-agent skill directories is concrete and unconsented. Normal Feishu OAuth handling does not remove that install-time control-surface risk.

The package establishes automatic hooks during postinstall in a foreign AI-agent settings file and retains a background npx execution path. These are concrete install-hook and persistence...

Automatic installation mutates a broad AI-agent instruction location outside the project. This meets the install-control-surface blocking policy regardless of the otherwise ordinary updat...

This is a concrete unconsented install-time mutation of a consumer project's AI-agent configuration and MCP approval state. The optional dashboard request is separately gated, but it does...