npm security reports, with evidence.

The package has a concrete automatic postinstall path that persists instructions into Claude Code rather than requiring an explicit setup command. This meets the install-time AI-agent con...

The package performs automatic install-time collection and transmission of an environment credential. This is concrete credential exfiltration behavior, regardless of the stated license-c...

The automatic lifecycle hook extracts an environment credential and transmits it remotely. Although framed as license validation, it is an unconsented install-time credential-exfiltration...

The package performs automatic install-time transmission of an environment credential to a remote endpoint. No additional payload activity was found, but the credential disclosure is conc...

The package performs an automatic install-time disclosure of an environment credential to the network, while its stated validation outcome is non-enforcing. This is concrete credential-ex...

The automatic lifecycle hook modifies global Claude telemetry to capture sensitive agent-session content and directs it to a remote endpoint. Its additional hook and permission merger exp...

The package performs automatic install-time transmission of an environment secret, while swallowing the validation errors that would make that transmission necessary for enforcement. The...

The package automatically exfiltrates an environment credential during preinstall. The absence of destructive behavior does not remove this concrete credential-disclosure risk.

The package performs automatic install-time transmission of an environment credential to a remote endpoint. No local writes or payload execution were found, but the credential exfiltratio...

The package performs concrete install-time transmission of an environment credential to a network endpoint. Static inspection found no compensating consent mechanism or need for this beha...

The package performs automatic install-time transmission of a credential from the consumer environment. The claimed license-check purpose does not remove the concrete credential-exfiltrat...

The package performs automatic install-time transmission of an environment credential to a remote service. This concrete credential exposure is unrelated to rendering icon components and...

The package contains a concrete automatic install-time credential exfiltration path. Static icon exports do not mitigate that behavior.

This package automatically exports an environment credential during installation, while its supposed validation failures are swallowed. That is credential exfiltration in an install hook.

The automatic lifecycle hook exports an environment credential to a remote host while suppressing failed validation. That is concrete credential exfiltration at install time.

This package performs automatic install-time transmission of an environment credential to a remote endpoint. The static icon code does not require that operation, making the lifecycle beh...

The package has a concrete install-time credential-exfiltration path: it reads an environment secret and transmits it over the network. The lifecycle hook makes the transfer automatic for...

The inspected lifecycle path establishes automatic, non-interactive mutation of a consumer project's Claude hook settings. Under the install-control-surface policy, that concrete postinst...

Although its automatic hook only initializes package-owned configuration, the package contains a direct, functional third-party entitlement and gate-bypass capability. That concrete tampe...

The lifecycle hook performs broad, destructive AI-agent configuration mutation in the consumer project without an explicit user command. This meets the install-hook abuse blocking policy.

This package performs concealed, automatic actions on a user's external messaging account and phones home with a machine-derived fingerprint on normal use. The install hook is not the pri...