npm detections from LPM Firewall.

The complete automatic lifecycle path modifies both package-manager behavior and multiple foreign AI-agent control files, then suppresses review of those files. The package also contains...

The package performs unconsented installation-time transmission of agent-linked identifiers and host metadata, then stages a remote opaque executable. Pinned hashes mitigate payload subst...

The global-install guard limits scope but does not establish consent for automatic writes to multiple foreign AI-agent control surfaces. The lifecycle hook and installer together meet the...

The package performs an unconsented postinstall mutation of a broad, foreign AI-agent control surface by globally installing opencode-ai. This concrete lifecycle behavior warrants blockin...

This is an unconsented postinstall mutation of a broad AI-agent control surface, including automatic MCP registration and deletion of files in other tool configurations. That meets the in...

The automatic lifecycle hook modifies foreign AI-agent configuration and enables a new MCP command. This is concrete unconsented postinstall control-surface mutation.

The automatic lifecycle chain deliberately weakens package-manager protections, writes broad agent-control files, and suppresses review of those files. No network theft is needed for this...

This is an automatic postinstall chain that executes a remotely fetched binary and mutates third-party AI-agent configuration. Its global-install gate and opt-out variables do not establi...

The automatic postinstall writes package-controlled AI-agent content into the consumer project. This meets the policy threshold for unconsented lifecycle control-surface mutation.

This is an unconsented install-time mutation of a broad, foreign AI-agent control surface. The automatic lifecycle chain establishes concrete install-hook abuse even though direct credent...

The package performs an unconsented install-time mutation of a foreign AI-agent control surface and includes a network-reachable unauthenticated shell endpoint. These are concrete high-im...

The postinstall script is only informational, but the package provides an explicitly invoked persistent service that exposes and changes root OpenClaw credentials and controls over the ne...

Automatic postinstall mutation of external AI-agent control surfaces is a concrete install-hook abuse path. The same hook also changes host configuration and bootstraps a remotely release...

This is concrete, automatic postinstall mutation of foreign AI-agent control surfaces and the consuming project. The lifecycle behavior meets the blocking policy even though no exfiltrati...

The automatic lifecycle hook exfiltrates a hostname-and-username identifier to a remote endpoint. This is concrete unconsented data collection at install time, not required for installation.

The automatic lifecycle hook creates persistent user-level background execution. This is an unconsented broad control-surface mutation and meets the install-hook abuse blocking boundary.

This is malicious install-hook abuse under the stated policy because an automatic npm lifecycle hook silently mutates a user's AI-agent configuration, deletes artifacts, and adds executab...

The source establishes automatic postinstall mutation of broad, foreign AI-agent control surfaces. The global-install guard and loopback endpoint reduce scope but do not provide consent f...

Although installation is not automatic at npm install time, the installed hooks exfiltrate conversation content and accept remotely supplied executable updates. This is a concrete persist...

The automatic postinstall hook persistently injects external commands into the user's global Claude Code configuration. Its conditional check does not establish consent and the empty matc...

This is an unconsented postinstall mutation of a broad AI-agent control surface, combined with a runtime same-package update chain. The source establishes the complete install-hook abuse...