npm detections from LPM Firewall.

The default runtime path forwards an API credential and arbitrary upstream environment values to an external endpoint. This is concrete credential exfiltration behavior, despite requiring...

The package has a concrete automatic install-time path that mutates project and user-wide AI-agent plugin control surfaces, including adding third-party plugins. This exceeds a transparen...

The shipped entrypoint captures and persists an API key, then sends it to an undocumented alternate domain. The lack of an install hook does not remove this concrete credential-exfiltrati...

The automatic lifecycle hook performs unpinned remote shell execution and installs an external executable engine, forming a concrete install-time remote-code-execution chain. Version matc...

The fixed third-party credential receiver and automatic npm installation are concrete harmful runtime behaviors, not required for a normal direct Facebook login client. The absence of ins...

This is malicious install-hook abuse under the policy because an automatic npm postinstall mutates a consumer’s broad AI-agent control surface and Git hooks. No network theft was needed t...

The package contains an automatically seeded credential-interception payload that captures Claude Authorization headers while weakening TLS verification. Its benign postinstall hook does...

The automatic postinstall chain performs broad consumer-project agent configuration and permission changes with no explicit user command or consent. This meets the install-control-surface...

The package embeds active third-party webhook destinations and automatically forwards broad runtime logs to them. The absence of an installation hook limits the trigger to runtime but doe...

The package has a concrete automatic install-time mutation of a foreign AI-agent dependency. The source does not show exfiltration, but the unconsented overwrite is sufficient install-hoo...

This is concrete credential disclosure through package-controlled default routing, not merely ordinary network use. No install hook is needed because importing and using the browser compo...

The automatic lifecycle hook trusts remote metadata to authorize both a native payload and arbitrary skill content, then executes the payload and installs the content into a global AI ski...

The automatic postinstall chain alters foreign AI-agent configuration and permission state. This is concrete unconsented install-time control-surface mutation.

This is a concrete install-hook abuse chain: an npm postinstall silently installs a separate global AI-agent CLI and persists environment changes. The lack of direct credential theft does...

The package has an automatic postinstall path that writes its instructions into multiple, including discovered, AI-agent skill directories. This is unconsented broad AI-agent control-surf...

The package has a concrete automatic postinstall chain that deploys content across broad, foreign AI-agent configuration directories. Its conflict safeguards do not make the automatic cro...

The package contains concrete runtime credential collection and transmission to external hosts, plus an automatic install-time npx invocation. The provider is automatically enabled based...

This is an automatic postinstall mutation of Claude Code's global or project skill control surface, including overwriting matching skills and executing copied modules. The lack of network...

The automatic postinstall hook writes a globally loaded, behavior-bearing agent skill into multiple existing harnesses. Its broad trigger rules and shell permissions make this a concrete...

This is a concealed, remotely controlled browser redirect packaged as an npm entry point. The lack of install hooks does not mitigate the delivered phishing or malware-routing behavior.

The package performs unconsented postinstall mutation of OpenCode configuration and injects binding instructions into future agent sessions. This is concrete install-hook abuse even thoug...