npm security reports, with evidence.

The package automatically and broadly alters a consumer project’s OpenCode agents, commands, skills, plugin files, and configuration. That meets the install-control-surface blocking polic...

The automatic postinstall hook mutates foreign AI-agent control surfaces in the consuming project and can overwrite an existing command. This is concrete unconsented install-time control-...

This is an automatic install-time remote-code-execution chain, not merely a user-invoked setup command. The external installer and Python payload are fetched and executed without integrit...

The source implements a covert persistent identifier and invisible response watermarking. Although it has no automatic npm lifecycle hook or confirmed exfiltration endpoint, the behavior...

The automatic global-install lifecycle mutates a broad AI-agent control surface and installs external plugin code. This meets the policy threshold for unconsented postinstall control-surf...

This is a concrete postinstall chain that executes an opaque native binary and modifies foreign AI-agent hooks and settings. It meets the install-control-surface block policy.

This is an unconsented postinstall mutation of broad AI-agent control surfaces through an opaque native executable. The automatic lifecycle chain and remote binary execution meet the inst...

The package performs unconsented postinstall mutation of a consuming project's AI-agent control surface and development controls. Its scope checks do not make this automatic cross-project...

The automatic lifecycle hook performs broad, unconsented mutation of foreign AI-agent dependencies and removes diagnostic artifacts. Version checks limit target selection but do not make...

The lifecycle path performs automatic, persistent consumer-project mutation and project-scoped agent plugin installation. This exceeds first-party package-owned extension setup and meets...

The package combines an automatic install hook, broad consumer-project and Claude plugin mutation, and a self-dependency selecting older releases. These concrete behaviors meet the instal...

The package automatically alters a third-party AI SDK OAuth callback page during installation. This is concrete install-hook abuse of a foreign authentication-related control surface, des...

This is an automatic staged remote-code-execution chain at npm postinstall, with no embedded trusted digest or signature for the fetched payload. The absence of visible credential theft d...

The package has no install-time lifecycle hook, but its explicit setup command creates persistent global agent control points that collect transcript content and forward provider credenti...

The package has a concrete postinstall path that mutates consumer AI-agent configuration and installs third-party agent capabilities. This meets the blocking policy for unconsented lifecy...

The package has a concrete automatic postinstall chain that overwrites skill directories for multiple unrelated agent products. The global-install guard and lack of network activity do no...

The package has a concrete automatic install-hook chain that changes global Claude agent behavior and executes package hooks. This meets the install-hook abuse blocking policy despite its...

The package automatically redirects runtime tracing to an unrelated private endpoint and transmits serialized trace data there. The lack of an install hook does not mitigate this import-t...

Automatic lifecycle execution of mutable remote shell code creates a concrete install-time remote-code-execution path. The local opt-outs and same-source checksum checks do not constrain...

The package uses postinstall to write instructions into multiple foreign AI-agent skill directories, rather than requiring an explicit user setup action. This meets the install-time AI-ag...

This is an unconsented postinstall mutation of the broad Claude and Codex command surface, with persistence and a hard-coded remote token-sync destination. The readable source confirms th...