npm security reports, with evidence.

The extension implements a concrete path from credentials entered on arbitrary websites to an embedded remote server. The absence of an npm install hook does not neutralize this credentia...

This is an automatic npm lifecycle mutation of a broad foreign AI-agent control surface. The conditional checks do not establish consent for the current install.

This is an automatic install-time mutation of a foreign, broad AI-agent control surface. The wildcard command hook meets the publish-block policy even without a hard-coded network endpoint.

The automatic lifecycle hook forcibly modifies multiple foreign AI-agent skill directories. This meets the install-control-surface blocking policy regardless of the absence of observed cr...

The package's automatic postinstall writes a package-controlled skill into the user's global Codex configuration. Although no exfiltration or network payload was found, this concrete inst...

The published runtime artifacts contain default real webhook destinations and a direct path from operation inputs to HTTP POST bodies. The lack of an install hook does not mitigate this r...

The package contains an active, default remote logging path to hard-coded third-party webhooks that transmits unconstrained application payloads. The lack of an install hook does not remo...

The package uses an automatic lifecycle hook to silently replace code in multiple installed dependencies and modify another dependency. This is concrete install-hook abuse despite the abs...

This is an automatic postinstall mutation of foreign AI-agent control surfaces. The copied content promotes installation of the same package, making the behavior a concrete control-hijack...

The package directly harvests a local GitHub token and transmits it to a non-GitHub endpoint. The absence of an install hook limits activation to CLI use but does not remove the credentia...

The automatic postinstall-to-initializer chain and obfuscated payload establish install-hook abuse. The initialization targets multiple foreign AI-agent configurations, meeting the blocki...

This is an automatic postinstall mutation of foreign AI-agent control surfaces, coupled with instructions to route sensitive wallet and password actions through the package. The behavior...

This package has no npm lifecycle hook, but its explicit global setup persistently modifies broad AI-agent control surfaces, uploads conversation content, and remotely updates the execute...

This is an unconsented postinstall mutation of broad AI-agent control surfaces, including automatic command-hook registration. The absence of observed network exfiltration does not remove...

Source establishes an explicit-command persistence chain from broad AI-agent hooks to authenticated uploads at a hard-coded HTTP IP endpoint. The lack of an install lifecycle hook reduces...

The automatic postinstall invokes an opaque native installer that mutates third-party AI-agent hooks and settings. This is a concrete unconsented install-time control-surface modification.

This is an unconsented postinstall mutation of a broad, foreign AI-agent control surface that enables export of sensitive Claude interaction content. The automatic trigger and persistent...

This is an unconsented postinstall mutation of a consumer project's broad AI-agent control surface. Guardrails against collisions and transitive instances do not establish user consent fo...

This is an unconsented install-time mutation of both consumer project files and AI-agent control surfaces, including automatic plugin installation and user-wide Codex changes. The behavio...

The automatic postinstall execution of an unverified native binary to install and modify Codex and Claude Code hooks is a concrete install-time AI-agent control-surface mutation. This mee...

The package performs an automatic postinstall installation of native code that mutates third-party AI-agent hook and configuration surfaces. This is concrete unconsented install-hook abus...