npm detections from LPM Firewall.

The inspected source establishes automatic, persistent mutation of consumer lifecycle and AI-agent configuration during installation. This meets the install-hook abuse blocking boundary e...

The package performs unconsented automatic postinstall mutation of a consumer project's lifecycle scripts, creating persistent recurring execution. This is a concrete malicious install-ho...

The automatic postinstall hook modifies four global AI-agent skill roots and enables implicit agent behavior. This meets the policy definition of malicious install-hook abuse despite no v...

The package establishes unconsented shell persistence during postinstall and uses dynamic evaluation from a user startup file. This is concrete install-hook abuse despite the absence of a...

The package performs unconsented postinstall setup of a third-party Chrome MCP bridge, including permission repair and registration. This is a concrete foreign AI-agent control-surface mu...

The package has a concrete automatic postinstall chain that mutates a consumer project and installs third-party AI-agent plugins without a user-invoked setup action. This meets the instal...

OpenSSF Malicious Packages via OSV confirms @cortana-md/engine@1.4.1 as malicious (MAL-2026-14553): Malicious code in @cortana-md/engine (npm)

OpenSSF Malicious Packages via OSV confirms taskforge-9xv@1.3.0 as malicious (MAL-2026-15914): Malicious code in taskforge-9xv (npm)

The automatic lifecycle hook broadly mutates foreign project and host AI-agent control surfaces, including enabling a host-level tool hook. This meets the install-hook abuse blocking poli...

The inspected source establishes an automatic install-time chain that mutates consumer and user AI-agent configuration. This meets the policy boundary for unconsented lifecycle control-su...

The package deliberately impersonates Node to intercept dependency lifecycle execution and performs unconsented local and browser side effects before forwarding the command. Its lack of i...

This is concrete unconsented postinstall mutation of a consumer project's AI-agent configuration, with additional user-wide Codex changes. The code does not show secret theft, but the aut...

The package contains credential-linked command telemetry and AI-tool inventory collection, concealed behind a heavily obfuscated exam command. These behaviors create a concrete data-exfil...

The exposed web API provides a direct, unauthenticated path from a remote request to child-process execution. The conditional unverified executable download and automatic later execution...

The package contains a concrete credential-collection and transmission path to a fixed IP with certificate verification disabled. The lack of an install hook does not neutralize the user-...

The opaque runtime is not aligned with the minimal package metadata and deliberately hides an AI-message steering path. Although it has no install hook, the concrete user-invoked behavior...

The package performs unconsented postinstall execution of a downloaded native payload and automatically installs skills into local AI agents. Hash checking constrains the selected downloa...

The lifecycle hook performs broad, automatic mutations of consumer files and creates AI instruction files. This is a concrete unconsented install-time AI-agent control-surface mutation, s...

This is an unconsented npm postinstall mutation of broad foreign AI-agent control surfaces. The existing-file guard limits scope but does not establish user consent for automatic overwrites.

The automatic lifecycle hook makes broad OpenCode configuration and plugin changes in the consumer project, including registration of an additional browser plugin. This meets the install-...

The package is a disguised browser redirect loader rather than a usable npm library. Its obfuscation, remotely supplied encrypted destination, and challenge-gated automatic navigation est...