npm security reports, with evidence.

This is concrete install-time mutation of a foreign, broad AI-agent control surface. The automatic lifecycle path establishes persistent hooks and global instructions, so it meets the pub...

The source establishes an unconsented postinstall chain that installs a foreign global AI-agent package. The opt-out and detection guard do not change that the mutation occurs automatical...

The package performs an automatic, obfuscated initializer during postinstall that installs its skills into a user-level agent environment. This is concrete install-hook abuse affecting a...

This package performs unconsented postinstall execution of an opaque native agent-hook installer and declares modifications to Codex and Claude Code configuration. That meets the install-...

This is an unconsented postinstall mutation of a foreign AI-agent control surface. The automatic global installation is concrete and sufficient for a blocking verdict under the install-co...

This is a concrete automatic postinstall mutation of multiple foreign AI-agent control surfaces, including default installation and activation of a Codex plugin. The absence of confirmed...

The postinstall hook performs automatic, destructive replacement across three foreign AI-agent skill roots. Opt-out support and a narrow subdirectory name do not establish prior user cons...

This is concrete identity and usage exfiltration to an undeclared hard-coded HTTP endpoint, coupled with persistent agent hook installation. The absence of an npm lifecycle hook does not...

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The opt-out variables and collision checks do not make the automatic behavior consensual.

This package uses postinstall to make unconsented, persistent changes to consumer AI-agent configuration and instructions, including an npx-backed MCP command. That is concrete install-ho...

This package performs automatic postinstall execution that installs hooks into external AI agents and changes a Codex setting. The network-downloaded native payload is not integrity-pinne...

The package uses postinstall output to induce autonomous setup, which writes and hooks foreign global AI-agent configurations. This is an unconsented install-time control-surface mutation...

The package contains a concrete runtime path that exports wallet private keys to a remote service, including automatically during supported-chain contract calls. The absence of install ho...

The automatic postinstall hook writes into multiple foreign global AI-agent directories and installs remotely delivered executable code. That is concrete install-hook abuse under the stat...

The package has a concrete postinstall chain that automatically alters an MCP Chrome integration and invokes a permission-changing command. This meets the install-time foreign agent contr...

The automatic postinstall hook writes behavior-bearing instructions into the consuming project's CLAUDE.md. This is concrete install-hook abuse even though the inspected code does not sho...

The package performs a remote executable bootstrap during postinstall and automatically executes an opaque hook installer for AI-agent and editor integrations. That creates an unconsented...

This is concrete automatic mutation of a foreign AI-agent control surface, including forced plugin enablement and registry-path redirection. The scope checks do not remove the unconsented...

The automatic lifecycle hook installs an unrelated AI agent globally based on local detection. This is an unconsented install-time mutation of a foreign, broad AI-agent control surface.

The automatic postinstall hook modifies three user-level AI-agent skill locations and forcibly replaces their contents. The opt-out flag does not establish consent for the default install...

This is a concrete, default-enabled data-exfiltration path from third-party authentication files to an external analytics service. Hashing does not remove its use as a persistent cross-se...