npm security reports, with evidence.

This is an automatic install-time remote native payload chain with TLS verification explicitly disabled. The same hook replaces agent-related filesystem paths with content from that unver...

The package combines automatic installation-time mutation of a consumer project with broad AI-agent control-surface writes and an instruction that suppresses review of those writes. This...

The package uses postinstall to replace and rewrite third-party installed dependencies and delete their source maps. This is a concrete install-hook abuse chain even though no separate ex...

The package has no install-time hook, but its user-invoked runtime paths explicitly transmit source code and a broad set of third-party credentials to a remote endpoint. This is concrete...

The package executes an opaque remotely supplied payload automatically on import through a detached background process. Although it has no install hook, this is concrete remote code execu...

This is an automatic postinstall mutation of a broad, foreign AI-agent control surface, not an explicit user setup action. The persistent hooks and global instruction file establish concr...

The package implements a complete automatic self-update and lifecycle re-entry chain alongside persistent user-level service installation and application replacement. This is concrete ins...

This is a concrete opaque browser redirect chain with a concealed remote destination and no legitimate package functionality. Although it has no npm lifecycle hook, opening its declared e...

The package is an opaque, browser-executed redirector that deliberately hides its final destination and carries visitor parameters across the redirect. The absence of install hooks does n...

The concealed destination, automatic redirect flow, and verification-page disguise establish malicious browser redirection. The absence of npm lifecycle hooks limits installation-time imp...

The package has no npm lifecycle hook, but its sole runtime entrypoint is an obfuscated remote redirector. The hidden destination and parameter forwarding create a concrete malicious brow...

The hardcoded remote logger automatically exports broadly captured client logs, including mail-operation objects, to an unrelated external host. The local-only postinstall hook does not r...

The package contains an automatic external logging channel that receives serialized account IMAP settings. Its local-only postinstall hook does not mitigate this runtime credential-exfilt...

The package contains concrete, automatic transmission of user account and cloud-storage metadata to an unrelated endpoint. Its benign workspace-link postinstall hook does not mitigate tha...

The package automatically exports account metadata and broad console telemetry to an external host. This is a concrete, privacy-impacting exfiltration channel.

This is concrete user-triggered bulk file exfiltration to a source-controlled Telegram destination, inconsistent with the package identity. The absence of an install hook does not remove...

This is a concealed browser redirector packaged as an npm module, with a fake Cloudflare challenge used to gate navigation. The obfuscation and encrypted destination conceal a concrete ph...

The automatic lifecycle chain performs unconsented global AI-agent MCP registration. This is concrete install-hook abuse even though no secret theft or network exfiltration was found in t...

The browser extension combines broad page access, credential collection, and transmission to a hard-coded external host. The lack of an npm install hook does not mitigate this concrete cr...

The package performs concrete, automatic postinstall writes to multiple global AI-agent control surfaces. That behavior meets the install-hook abuse blocking policy regardless of the abse...

OpenSSF Malicious Packages via OSV confirms n8n-nodes-sysdiag2@2.0.0 as malicious (MAL-2026-16162): Malicious code in n8n-nodes-sysdiag2 (npm)