Loading npm security reports…
Skip to main contentSoft block: AI-agent control surface2026-09-30 19:59Soft block: AI-agent control surface2026-09-30 19:16Soft block: AI-agent control surface2026-09-30 16:54Soft block: AI-agent control surface2026-09-30 16:54
npm threat feed
npm detections from LPM Firewall.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 14
Updated 8 Oct 2026, 17:32 UTC. Ordered by latest scan.
@walkhi/code-relax@0.1.0-beta.1
The inspected lifecycle chain performs an unconsented install-time mutation of a foreign AI-agent control surface, meeting the blocking policy. The local destination and overwrite guard l...
toga-ai@1.0.921
Source proves unconsented postinstall mutation of a broad AI-agent control surface, which meets the blocking policy. The block rests on the global configuration change, without assuming t...
chron-mcp@0.1.60
The inspected global postinstall path performs unconsented mutation of foreign AI-agent configuration and broad instruction files, meeting the blocking policy. The local-install guard and...
karajan-code@4.37.0
The inspected source establishes unconsented postinstall mutation of two foreign, global AI-agent control surfaces. This meets the supplied blocking policy even though the registered MCP...
