npm detections from LPM Firewall.

The package has a concrete automatic install-time persistence mechanism that mutates a foreign project and causes ongoing external reporting. The absence of direct token transmission does...

The package embeds a live remote command channel that executes operator-provided JavaScript and returns output. No install hook is present, but the runtime behavior is concrete malicious...

The automatic postinstall writes package-controlled instructions into several foreign AI-agent skill locations. This meets the policy threshold for malicious install-hook abuse even thoug...

The package implements concrete persistent agent-data collection and upload behavior, plus a latest-version self-install path and an automatic external binary download. The explicit hook-...

The package implements automatic disclosure of sensitive recruitment and conversation data to a hard-coded third-party endpoint. The lack of an install hook limits scope but does not remo...

The package combines an automatic lifecycle hook, broad host-agent configuration writes, injected agent instructions, and runtime self-updating through a fresh global install. The global-...

The automatic lifecycle hook changes foreign AI-agent configuration and introduces a moving remote command path. This meets the install-control-surface blocking policy.

The postinstall lifecycle performs unconsented broad mutation of foreign AI-agent control surfaces. This meets the install-control-surface blocking policy despite no confirmed installer e...

The package combines an automatic install hook, writes to multiple foreign AI-agent configuration surfaces, and injected instructions that direct agents to use its relay without user appr...

This is a concrete, unconsented postinstall modification of a foreign GitHub Actions control surface with network behavior. It meets the install-hook abuse blocking policy.

The automatic postinstall chain performs remote code installation and unconsented Codex plugin configuration. Its global-install guard narrows exposure but does not establish user consent...

The package deliberately conceals a remote code loader in its runtime entrypoint. Its network-selected payload execution is concrete malicious behavior.

This is an unconsented postinstall mutation of broad AI-agent control surfaces combined with automatic telemetry. The behavior is concrete and reaches user-wide configuration and arbitrar...

The package contains a concealed import-time loader that obtains and executes remote code, then persists it as a detached process. The absence of lifecycle hooks does not mitigate this di...

The automatic postinstall and normal startup paths modify dependencies and the host system, including privileged package-manager attempts. The package also automatically maintains hooks i...

The package combines an automatic install hook with broad foreign project agent-control mutations and plugin installation. This meets the install-control-surface blocking policy even thou...

The package has an automatic install-time hook that installs and executes a separate Python artifact in the user's home directory. That unconsented external payload installation is concre...

This is concrete, automatic mutation of a foreign AI-agent configuration area and replaces existing content. The lack of network or credential theft does not neutralize the install-time c...

The source establishes an automatic postinstall chain that globally installs a separate AI coding agent. This meets the blocking policy for unconsented lifecycle mutation of a foreign or...

This is unconsented postinstall mutation of a broad AI-agent control surface, including automatic MCP registration and remote thin-client setup. The global-install guard does not make the...

The package performs an unconsented postinstall mutation of a foreign global AI-agent control surface. This meets the install-hook abuse blocking boundary even without evidence of secret...