npm detections from LPM Firewall.

The package combines reviewer manipulation with automatic execution of unpinned remote code and credential handling. The lack of an npm install hook reduces scope but does not neutralize...

This package has a concrete automatic postinstall mutation of a consumer AI-agent configuration and configures an npx-backed MCP server. The opt-out and CI guards do not provide installat...

Source inspection confirms an automatic postinstall write to the consumer's AI-agent MCP configuration that configures npx to run another package. This meets the policy for an unconsented...

This is an unconsented postinstall mutation of a consumer AI-agent control surface that registers a remotely resolved executable capability. The absence of direct secret theft does not re...

This package uses an automatic postinstall hook to add a consumer-wide MCP server that launches another npm package through npx. That is an unconsented install-time mutation of an AI-agen...

The package automatically mutates a consumer AI-agent control surface during postinstall and configures it to execute another package through npx. This meets the install-time control-surf...

The package performs silent, forced postinstall writes into multiple AI assistant configuration directories. That is a concrete unconsented broad agent-control-surface mutation, despite n...

Direct source inspection confirms an automatic install hook that executes remote code and persists it through shell profiles and cron. The benign runtime export does not mitigate this con...

This is a concrete install-time remote-code-execution and persistence chain unrelated to the package's exported utilities. The package should be blocked.

The confirmed preinstall hook performs concealed remote code execution from an unreviewable payload. The harmless-looking runtime stub does not mitigate this install-time behavior.

The package contains a confirmed automatic install-time remote-code-execution chain. Its minimal runtime code does not justify or constrain that behavior.

The manifest contains a concrete automatic install-time remote payload execution and cron persistence chain. The minimal runtime module does not justify this behavior.

Source inspection confirms an automatic install hook that fetches and executes a remote payload, then establishes cron persistence. This is concrete malicious install-hook abuse.

This package performs unconsented remote code execution during preinstall and persists it through cron. This is concrete malware behavior, not a logging feature.

Direct source inspection confirms an automatic install hook that executes an unverified remote script and creates cron persistence. The benign-looking runtime stub does not mitigate this...

This is concrete unconsented install-time remote code execution with persistence. The harmless runtime stub does not mitigate the lifecycle attack.

The package contains a concrete remote download-and-shell execution path plus silent privileged self-updating. Its install hooks are cosmetic, but runtime behavior is sufficient to block...

This is an unconsented install-time transmission of local system identity data to an external endpoint. The behavior is concrete and unrelated to the package's runtime code.

This is an unconsented postinstall mutation of a foreign AI-agent control surface, including enabled command definitions. Conflict protection does not remove the risk because a new worksp...

The package performs automatic install-time host identification and sends it to an external endpoint. This is concrete data exfiltration with no legitimate implementation in the package.

The package performs unconsented install-time host fingerprinting and external transmission. Its empty runtime code does not justify that behavior.