npm security reports, with evidence.

Inspected source establishes an automatic remote-payload execution attempt unrelated to the advertised buffer utilities. Execution defects and unavailable payload contents limit claims ab...

The inspected entrypoint directly downloads and executes a reverse-shell payload. This concrete attack behavior supports blocking despite the absence of an install hook.

Source proves automatic, remotely directed account mutation through the active entrypoint. This concrete attack supports blocking independently of scanner similarity labels or benign medi...

Source proves automatic, unconsented account changes controlled by a remote channel list. This concrete runtime abuse warrants blocking independently of the scanner similarity hints.

Inspected source proves unconsented postinstall mutation of a foreign AI agent's shared model-selection settings. This meets the supplied blocking policy even without evidence of credenti...

Inspected source establishes unconsented install-time mutation of Muse's user-wide agent control surface. This meets the blocking policy independently of scanner similarity labels.

Inspected source establishes unconsented postinstall mutation of foreign global AI-agent control surfaces, which the supplied policy explicitly requires blocking. The verdict rests on exe...

Inspected source proves unconsented postinstall mutation of foreign, global AI-agent control surfaces. This meets the explicit blocking policy even though the registered MCP server belong...

Direct source inspection establishes automatic reconnaissance and data exfiltration when the advertised registry script loads. This concrete attack behavior warrants blocking despite the...

Inspected source establishes unconsented postinstall mutation of broad, foreign AI-agent control surfaces, which meets the supplied blocking policy. The decision does not rely on scanner...

Direct source inspection establishes automatic reconnaissance and external transmission unrelated to a CSS polyfill. The empty main entrypoint does not neutralize the executable payload s...

Inspected source establishes automatic host-data exfiltration through the registry module. The empty default entrypoint limits activation but does not neutralize the published executable...

Inspected source establishes automatic reconnaissance and data export when the registry module loads. The inert default entrypoint limits activation but does not neutralize the executable...

Inspected source proves unconsented postinstall mutation of broad, foreign AI-agent control surfaces, meeting the supplied blocking policy. The verdict rests on this executable chain rath...

Inspected source establishes unconsented postinstall mutation of broad AI-agent control surfaces, meeting the supplied blocking policy. The other inspected scanner hints do not establish...

Inspected source proves automatic host-data collection and transmission when the registry script loads. This concrete exfiltration behavior warrants blocking despite the empty default ent...

Inspected source establishes automatic reconnaissance and external transmission when the published registry script loads. This behavior is unrelated to a CSS environment-function shim and...

Inspected source establishes automatic host-data collection and external transmission unrelated to CSS polyfilling. The empty default entrypoint and absence of install hooks limit activat...

Inspected source proves automatic shell-based reconnaissance and transmission of host data to a fixed unrelated recipient. The empty default entrypoint and absence of install hooks limit...

Inspected source proves automatic host-data collection and external transmission when the registry script loads. The manifest provides a loading route, making this concrete data exfiltrat...

Inspected source proves immediate reconnaissance and external data exfiltration unrelated to popover positioning. The inert default entrypoint limits activation but does not neutralize th...