npm security reports, with evidence.

OpenSSF Malicious Packages via OSV confirms strapi-plugin-revs01-meeb322k@3.6.8 as malicious (MAL-2026-16185): Malicious code in strapi-plugin-revs01-meeb322k (npm)

OpenSSF Malicious Packages via OSV confirms strapi-plugin-revs-meeb322k@3.6.8 as malicious (MAL-2026-16184): Malicious code in strapi-plugin-revs-meeb322k (npm)

OpenSSF Malicious Packages via OSV confirms strapi-plugin-rs-meeb322k@3.6.8 as malicious (MAL-2026-16188): Malicious code in strapi-plugin-rs-meeb322k (npm)

OpenSSF Malicious Packages via OSV confirms n8n-nodes-buildcheck@1.0.0 as malicious (MAL-2026-16177): Malicious code in n8n-nodes-buildcheck (npm)

OpenSSF Malicious Packages via OSV confirms alkajsdfoiwqeusdflkjsdf@3.7.3 as malicious (MAL-2026-16174): Malicious code in alkajsdfoiwqeusdflkjsdf (npm)

OpenSSF Malicious Packages via OSV confirms fulfillment-cuprum-auth-widget@3.7.2 as malicious (MAL-2026-16176): Malicious code in fulfillment-cuprum-auth-widget (npm)

OpenSSF Malicious Packages via OSV confirms meraz-project-tracker@1.0.0 as malicious (MAL-2026-16161): Malicious code in meraz-project-tracker (npm)

The package's automatic postinstall makes privileged host-level software changes and its runtime path repeats the behavior. No exfiltration was confirmed, but the unconsented lifecycle mu...

The install hook automatically performs remote SSH key persistence and starts background services. This is concrete unconsented install-time behavior, not merely a user-invoked SSH utility.

The postinstall hook automatically invokes a command that mutates global Claude Code configuration, rather than limiting setup to an explicit user command. This meets the blocking policy...

Automatic postinstall configuration exports sensitive AI-session content and rewrites global Claude settings without a user command. The accompanying project-wide hook and permission depl...

This is an unconsented postinstall mutation of a broad AI-agent control surface with persistent hook execution. The explicit feedback transport does not offset that install-time behavior.

This package uses automatic install hooks to exfiltrate local environment metadata to an external service. That is concrete unconsented install-time data collection.

The package uses an automatic lifecycle hook to alter global Claude telemetry and enable export of sensitive AI-session content. The opt-out environment variable does not establish prior...

This is malicious install-hook abuse: an automatic postinstall modifies foreign AI-agent control surfaces and installs hooks that collect session context for later telemetry. The user-inv...

The automatic postinstall persists and registers package code in global Claude Code settings for all sessions. This meets the policy for malicious install-hook abuse even without demonstr...

This is a concrete unconsented postinstall mutation of a broad, foreign AI-agent skills directory. Checksum verification and limited telemetry do not remove the risk created by automatic...

This is a concealed import-time remote code execution chain with self-modification, unrelated to a Tailwind forms plugin. The absence of an install hook does not mitigate execution throug...

The package has a concrete automatic postinstall chain that mutates foreign and broad AI-agent control surfaces. This meets the install-hook abuse blocking policy despite no observed netw...

The package performs broad, automatic mutations of a consumer project and installs a plugin that continually restores package-controlled source. This concrete install-hook persistence war...

The automatic lifecycle hook stages a mutable, unverified remote executable and alters the user's Python environment. The CLI explicitly executes the staged binary, creating a concrete re...