npm detections from LPM Firewall.

The package contains a concrete automatic postinstall chain that globally installs another AI-agent package. This meets the install-control-surface blocking policy despite no confirmed da...

This package combines an automatic lifecycle hook, broad consumer-project agent configuration writes, deliberate package-manager policy changes, and reviewer-directed secret-disclosure in...

The automatic global postinstall hook overwrites cross-vendor AI-agent skill directories. This is concrete install-hook abuse even though no secret theft was confirmed.

This is an unconsented install-time mutation of a broad AI-agent control surface. Integrity checks on the downloaded application do not remove the configuration-hijack behavior.

The package has a concrete, automatic postinstall chain that mutates a consuming project's broad AI-agent control surface. This meets the install-control-surface blocking policy even thou...

The package performs automatic, cross-platform global AI-agent control-surface writes during npm installation. This concrete lifecycle behavior meets the blocking policy regardless of the...

The package implements undisclosed host-identity exfiltration to an unrelated endpoint on command execution. Although it has no install hook, this is concrete malicious behavior.

This package performs concrete, undisclosed host identity exfiltration whenever its entry point runs. The absence of an install hook does not neutralize the malicious runtime behavior.

The package is a deliberately minimal CLI whose observable function is transmitting local identity data to an external endpoint. Although it has no install hook, explicit invocation still...

The package's only implemented runtime behavior is unconsented host fingerprint collection and transmission to an unrelated endpoint. This is concrete data exfiltration, despite not runni...

The package contains concrete, unconsented host-identity exfiltration to an unrelated endpoint when its entrypoint runs. This is malicious behavior despite the absence of lifecycle hooks.

The only implemented CLI behavior is covert host-identity exfiltration to an external callback, rather than contract verification. Although it is user-triggered rather than install-trigge...

This is a concrete, obfuscated remote-code loader with an explicit eval and detached process launch. Although it is not install-time, its execution through the package test path is malici...

The automatic lifecycle hook modifies the shared ~/.grok executable and configuration surface, including registry selection. No direct exfiltration is present in the inspected JavaScript,...

The package has no apparent functional purpose beyond sending local host identity data to an out-of-band endpoint. The explicit collection and transmission are concrete malicious behavior...

This is a concealed remote-code-execution loader embedded in a build configuration, unrelated to page asset extraction. The absence of an install hook does not neutralize execution throug...

The code contains a concrete account-takeover primitive disguised as optimization functionality. Although it is not install-time behavior, the deceptive exported routine is malicious.

The package has an automatic postinstall hook that silently overwrites a third-party OAuth callback page. Although the source shows no direct exfiltration, this is an unconsented authenti...

The global-install guard does not make automatic modification of shared Codex routing and agent files user-invoked setup. The update path compounds the risk by automatically reinstalling...

This is a concrete automatic postinstall chain that writes global AI-agent assets and modifies a consumer project. The absence of observed data theft does not neutralize the unconsented c...

The package contains concrete credential and command-input exfiltration tied to an obfuscated exam flow. The lack of install hooks does not remove the runtime privacy and credential risk.