npm detections from LPM Firewall.

The automatic postinstall hook modifies broad, foreign AI-agent control surfaces and creates a fallback agent directory. This meets the install-time AI-agent control-hijack blocking policy.

The lifecycle hook automatically persists package-controlled skills and executable command hooks into the user's global Claude configuration. That concrete install-time agent-control muta...

The package has no install hook, but its active MCP interface contains coercive no-inspection instructions and sends a stable machine identifier plus error telemetry to a remote endpoint....

The package performs broad consumer-project and AI-agent control-surface mutation automatically during postinstall, then persists itself in the consumer postinstall hook. This meets the i...

This is unconsented postinstall mutation of a foreign, broad AI-agent control surface, followed by collection and network transmission of AI interaction content. The conditional guards do...

The automatic postinstall hook broadly mutates foreign AI-agent control surfaces and installs an enabled Codex plugin. This is concrete install-hook abuse under the launcher policy.

This package automatically performs privileged host package installation and dependency mutation during lifecycle execution, then repeats the behavior at CLI startup. No exfiltration was...

The lifecycle hook automatically installs a foreign AI-agent CLI and persistently modifies user shell and application locations. This meets the install-hook abuse blocking boundary even t...

OpenSSF Malicious Packages via OSV confirms twapfetch@1.0.0 as malicious (MAL-2026-14197): Malicious code in twapfetch (npm)

This is unconsented postinstall mutation of a broad foreign AI-agent control surface, coupled with weakening package-manager lifecycle safeguards. The local-only screenshot utility does n...

The inspected source establishes automatic install-time mutation of consumer project files, AI-agent plugins, and the consumer lifecycle script. This crosses the install-control-surface b...

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces, coupled with replacement and unchecked remote acquisition of an executable application. The behavior...

This package uses an automatic npm lifecycle hook to install a system package, including privileged commands, and repeats that behavior at runtime. That is concrete unconsented install-ho...

OpenSSF Malicious Packages via OSV confirms @viertechjs/wb@6.0.0-vier.7 as malicious (MAL-2026-15832): Malicious code in @viertechjs/wb (npm)

OpenSSF Malicious Packages via OSV confirms dim-svelte-ui@1.0.0 as malicious (MAL-2026-14506): Malicious code in dim-svelte-ui (npm)

OpenSSF Malicious Packages via OSV confirms @viertechjs/wb@6.0.0-vier.6 as malicious (MAL-2026-15832): Malicious code in @viertechjs/wb (npm)

OpenSSF Malicious Packages via OSV confirms @viertechjs/wb@6.0.0-vier.4 as malicious (MAL-2026-15832): Malicious code in @viertechjs/wb (npm)

OpenSSF Malicious Packages via OSV confirms @viertechjs/wb@6.0.0-vier.3 as malicious (MAL-2026-15832): Malicious code in @viertechjs/wb (npm)

This is a concrete unconsented postinstall mutation of a consumer OpenCode control surface, coupled with remote vendor-controlled content application. Signature verification does not remo...

The automatic postinstall writes enabled agent-control configuration and a broad set of agent content into the consuming project. Existing-file conflict handling does not provide consent...

This is an unconsented install-time mutation of broad Claude and Codex command control surfaces, combined with persistent scheduled self-updating. The global-install guard does not make t...