npm detections from LPM Firewall.

The automatic postinstall performs broad mutation of foreign AI-agent configuration and instruction files, plus package-manager installs. This is a concrete unconsented agent-control hija...

The automatic lifecycle hook modifies multiple external AI-agent skill directories, including fallback targets, rather than limiting setup to an explicit user command or package-owned loc...

The package performs an unconsented global-install lifecycle mutation of multiple foreign AI-agent control surfaces, then injects content into their sessions. No network theft was found,...

This is an automatic postinstall mutation of broad, foreign AI-agent control surfaces. The global-only guard and opt-out do not make the install action consensual.

The automatic lifecycle hook mutates a global AI-agent skill directory and can recursively delete a pre-existing matching entry. The weak installation guard makes this occur beyond an exp...

The automatic global postinstall mutates a shared AI-agent skill control surface and can recursively remove existing matching content before replacing it. This is concrete install-hook ab...

The install-time overwrite of a foreign global AI-agent instruction file is concrete unconsented control-surface mutation. No exfiltration was found, but the lifecycle behavior meets the...

The automatic lifecycle hook force-installs a package-controlled skill into user-wide directories for two agent ecosystems. That meets the install-control-surface block policy regardless...

The postinstall hook concretely mutates consumer .claude and .github agent-control directories without an explicit user command. That meets the install-time AI-agent control-surface abuse...

The postinstall hook writes executable-behavior instructions into a foreign user-level AI-agent configuration without an explicit user command. That meets the install-control-surface bloc...

The automatic postinstall hook writes AI-agent command files into the consumer project and supplies commands that direct later tool use and file mutation. This meets the install-hook abus...

The automatic global lifecycle hook modifies several unrelated AI-agent instruction surfaces and installs a remote-instruction requirement. The explicit update command's registry traffic...

This is an unconsented install-time mutation of broad foreign AI-agent control surfaces, amplified by a mandatory remote instruction fetch. The behavior is concrete and reachable from the...

The automatic postinstall chain writes a bundled capability into global locations for many foreign AI agents. Collision safeguards do not provide user consent for this broad control-surfa...

This is an unconsented postinstall mutation of a broad foreign AI-agent control surface. The guarded implementation does not remove the automatic, cross-agent configuration change.

The automatic lifecycle hook installs a bundled skill globally across a broad set of foreign AI-agent integrations without explicit user action. This is concrete install-hook abuse of an...

This package performs an unconsented postinstall mutation of broad third-party AI-agent skill locations. Conflict checks reduce accidental overwrites but do not remove the automatic contr...

The package has no observed exfiltration or remote execution, but its automatic postinstall writes behavior-bearing content into two foreign user-level agent skill roots. This meets the i...

The source establishes an unconsented postinstall mutation of broad, foreign AI-agent control surfaces. No network or secret theft is needed for this install-hook abuse to warrant blocking.

The automatic lifecycle hook mutates broad, foreign AI-agent skill locations and installs instructions that direct agents to operate a trading system. This meets the install-control-surfa...

This is unconsented postinstall mutation of broad AI-agent control surfaces. The absence of network or shell execution does not remove the concrete persistence and control-surface risk.