npm detections from LPM Firewall.

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces, including workspace trust. The lifecycle behavior is concrete and sufficient to block even though the...

The postinstall lifecycle performs broad global Claude and Codex control-surface writes and registers continued execution on Codex turn completion. This meets the policy threshold for mal...

This is a concrete unconsented postinstall mutation of a consumer AI-agent control surface, combined with remote vendor-authorized content deployment. Signature verification does not remo...

The package uses an automatic npm lifecycle hook to write and prune skills in both Codex and Claude user directories. This is unconsented postinstall mutation of a broad AI-agent control...

The package performs unconsented postinstall writes and deletions in both Codex and Claude user skill locations. This meets the install-control-surface policy for blocking.

This package performs an automatic postinstall write to global Codex and Claude skill directories and prunes their contents. That concrete lifecycle control-surface mutation meets the blo...

The package automatically mutates the global Claude skills directory and installs instructions that take effect across Claude responses. This is unconsented install-time control-surface m...

The package has a concrete automatic postinstall path that injects and prunes skills in two unrelated agent homes. This meets the install-time AI-agent control-surface abuse policy.

The confirmed postinstall hook modifies both Codex and Claude configuration trees without a user-invoked setup action. This meets the policy threshold for malicious install-hook abuse eve...

This package uses an automatic install hook to persist a GitHub Actions workflow in a consumer repository and transmit repository metadata externally. The behavior is unconsented install-...

A registry-install lifecycle hook modifies both Codex and Claude user skill directories and prunes their contents without an explicit user setup action. This meets the install-time AI-age...

The package sends Facebook credentials to an unaffiliated default endpoint during its ordinary password-login flow. This is concrete credential exfiltration, not a scanner-only signal.

This package uses an automatic install hook to implant a persistent workflow into consumer repositories and transmit their metadata to an external service. The behavior is concrete, uncon...

The package performs broad, forced AI-agent configuration writes during npm postinstall without user invocation. This meets the install-control-surface block policy even though the instal...

The postinstall hook silently overwrites a global AI-agent instruction file outside the package and consumer project. This meets the policy for malicious install-time AI-agent control hij...

The automatic postinstall hook overwrites a global AI-agent instruction file under the user's home directory. This meets the policy boundary for malicious install-time AI-agent control-su...

Source inspection confirms an unconsented postinstall mutation of a broad AI-agent control surface via an external installer. This meets the install-control-surface block policy.

The guarded global trigger does not make the lifecycle mutation consented: installation automatically rewrites broad shell and agent command surfaces and adds persistence. This meets the...

Although it has no automatic npm install hook, the explicitly invoked CLI establishes persistent controller SSH access and prepares remote AI-command execution. The package should be bloc...

This is concealed import-time malware, not functionality required for an MFA library. The remote payload execution and multi-method persistence warrant blocking despite the lack of an npm...