npm security reports, with evidence.

This is unconsented postinstall mutation of a foreign AI-agent control surface, combined with broad deletion in the user's Claude command directory. The automatic native download further...

This is an automatic remote-native-payload bootstrap whose trust decision is controlled by the payload source itself, followed by execution of the resulting binaries. That install-to-exec...

The postinstall hook mutates a foreign global agent control surface and installs an auto-starting background plugin. This is concrete unconsented install-hook abuse, even though no instal...

The package performs unconsented install-time mutation of foreign dependency code and removes source maps afterward. This is a concrete install-hook abuse pattern even though the hook its...

This is a concrete remote code execution backdoor activated through the package's normal export. Concealment, detached execution, and remote dynamic evaluation leave no package-aligned be...

This is an unconsented postinstall mutation of a broad AI-agent control surface. The automatic hook, skill, statusline, and global instruction changes meet the install-hook abuse blocking...

The package contains a concrete default-enabled data-export path to hardcoded external webhooks. It is not limited to an explicit user logging command or a caller-selected endpoint.

The complete lifecycle chain automatically alters global AI-agent configuration and instructions without interactive consent. This meets the install-hook abuse blocking policy even though...

The automatic postinstall hook mutates a foreign AI OAuth control surface, satisfying the install-control-surface block boundary. The hook is source-confirmed and does not require a user...

This is an unconsented global npm lifecycle mutation of broad AI-agent command and persistence surfaces, combined with automatic self-updating. It also contains a concrete credential-tran...

The hard-coded fallback recipient, automatic enabling of migrated jobs, and later outbound delivery establish a concrete exfiltration path. The lack of an npm install hook does not remove...

This is an import-triggered remote code execution chain with persistence-like detached execution, not a package-aligned client feature.

This package contains a concealed, default-on action that changes a user's WhatsApp subscriptions during ordinary socket creation. The unrelated phone-number lookup endpoint reinforces th...

The package has a concrete automatic install-time chain that patches another product's runtime files to expose session messages. Its runtime configuration mutation further enables that ex...

This is an obfuscated, remotely controlled redirect hidden behind a verification page, not a legitimate npm package function. Although it has no install hook, opening its declared entrypo...

The automatic lifecycle hook broadly mutates foreign AI-agent skill registries. This meets the install-control-surface blocking policy regardless of the absence of direct JavaScript exfil...

The automatic postinstall hook broadly mutates a foreign consumer project and installs a plugin that restores overwritten source files. This is concrete install-hook abuse under the state...

The package contains a concrete runtime path that silently transmits credential-bearing mail-account configuration to an unrelated external host. This is data exfiltration, not necessary...

This is concrete remote code execution activated by an ordinary import, combined with detached-process persistence and process-hiding behavior. The lack of an npm lifecycle hook does not...

The package contains a concrete, runtime-triggered project-metadata exfiltration path to a hard-coded endpoint and an unpinned remote binary execution path. The lack of an npm lifecycle h...