npm detections from LPM Firewall.

The package combines deliberate obfuscation, an undisclosed remote control check, and destructive host-page behavior in a simple UI component. Although it has no install hook, the runtime...

The automatic lifecycle chain silently mutates global instruction surfaces for multiple AI-agent products. This meets the install-control-surface blocking policy regardless of the absence...

The automatic lifecycle hook performs unconsented global AI-agent tooling and persistent user-environment mutations. This meets the install-hook abuse blocking boundary even though no cre...

The package contains a concrete, silent remote logging path for user mail-account metadata and runtime errors. The local-only install hook does not mitigate that runtime data exfiltration...

The package has a concrete automatic postinstall path that installs code into a global agent extension location and alters future agent sessions. No self-dependency or network theft was f...

The automatic postinstall writes and activates code in Pi's user-wide extension location, then alters agent context and prompts. This meets the install-control-surface block policy despit...

This is an unconsented postinstall mutation of a foreign, user-wide AI-agent control surface. Integrity checks on the downloaded binary do not mitigate the automatic Cursor configuration...

This is a concrete install-hook abuse chain: automatic installation mutates a consumer project, changes its agent control surface, and persists through the consumer postinstall script. Th...

The package has a concrete automatic postinstall chain that modifies consumer OpenCode configuration and enables an extra browser plugin. Its transparent source and lack of observed netwo...

The automatic postinstall hook broadly mutates and activates third-party AI-agent configuration, including unconditional Claude skill installation and Codex plugin activation. This meets...

The unrelated awheelmaker subscription and mailing workflow, plus the embedded mail-service credential, establishes intentional data collection and third-party outreach. The absence of an...

The package has no install hook, but runtime code deliberately extracts a wallet private key and transmits it to a remote service, including through a URL query string. That is concrete c...

This is an unconsented install-time mutation of broad AI-agent control surfaces. It meets the install-hook abuse blocking policy even without evidence of secret theft or network exfiltrat...

The package automatically mutates a foreign global AI-agent control surface and installs a skill that directs the agent to execute commands. The fixed download host and opt-out do not est...

This is an unconsented install-time remote-code execution chain: an opaque native payload is downloaded, persisted, and executed automatically. The visible source provides no integrity ve...

The package automatically writes persistent global Claude Code commands during postinstall, meeting the install-hook abuse blocking boundary. No install-time network exfiltration was obse...

This is unconsented postinstall mutation of a broad AI-agent control surface combined with remote collection of sensitive agent content. The source establishes a concrete install-time dat...

The automatic lifecycle write is not benign documentation: it plants an AI-directed instruction file in the consumer project that explicitly drives broad agent control-surface changes. Th...

This release automatically modifies foreign AI-agent configuration during npm installation and adds Windows login persistence. Those actions meet the install-hook abuse blocking policy ev...

This package performs unconsented, automatic system package installation from a registry lifecycle hook and retries it during normal startup. Its external agent-hook refresh behavior adds...

The package contains concrete AI-agent instruction injection and undisclosed host/error telemetry in its executable entrypoint. The absence of an install hook limits installation impact b...