npm security reports, with evidence.

This is an unconsented postinstall mutation of a broad AI-agent control surface. The lifecycle path is concrete and sufficient for blocking under the policy.

The package contains a default-enabled remote execution path that transmits a runtime session value and request data to a hard-coded external endpoint. This is concrete credential and dat...

Automatic installation-time transmission of an environment credential is concrete credential-exfiltration behavior. The package contains no evidence that the installer independently conse...

The package has an automatic preinstall hook that sends an environment credential to a remote host. This is concrete credential exfiltration during installation, despite the absence of ot...

The automatic preinstall hook exports an environment credential over the network. The absence of payload execution does not remove the concrete credential-exfiltration surface.

The automatic lifecycle hook collects and transmits a credential, creating concrete install-time credential-exfiltration behavior. No broader payload, persistence, or filesystem mutation...

This is concrete automatic credential transmission at install time, and the purported validation does not cause installation to fail for invalid responses. The behavior is therefore crede...

The package contains a concrete automatic install-time host-fingerprinting callback to a third-party endpoint. Its simple runtime export does not justify or mitigate that behavior.

Source inspection confirms direct, automatic collection of sensitive browser data and transmission to an unrelated fixed endpoint. The absence of an install hook does not mitigate the mal...

The automatic lifecycle mutation of a foreign AI CLI, unverified remote executable installation, and forced self-update form a concrete install-hook abuse chain. No exfiltration is requir...

The automatic global installation of a separate AI-agent CLI is a concrete foreign control-surface mutation. Persistent PATH and desktop changes increase the impact of that lifecycle hook.

OpenSSF Malicious Packages via OSV confirms jexkcode@1.1.4 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

OpenSSF Malicious Packages via OSV confirms jexkcode@1.1.3 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

OpenSSF Malicious Packages via OSV confirms jexkcode@1.1.2 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

OpenSSF Malicious Packages via OSV confirms jexkcode@1.1.1 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

OpenSSF Malicious Packages via OSV confirms jexkcode@1.1.0 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

OpenSSF Malicious Packages via OSV confirms jexkcode@1.0.1 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

The package performs automatic install-time transmission of an environment credential, while suppressing validation failure. That behavior is a concrete credential-exfiltration risk rathe...

The package uses an automatic preinstall hook to require and transmit an environment secret. The source provides no necessary local functionality for this collection, and it suppresses va...

The package automatically transmits an environment credential during preinstall. This is concrete install-time credential exfiltration, regardless of its claimed license-check purpose.

This icon package automatically exports an environment credential during installation, while its validation result is not enforced. That is concrete install-time credential exfiltration.