npm security reports, with evidence.

This is an unconsented postinstall mutation of a consumer AI-agent control surface, compounded by opaque configuration code and unrelated dependency rewrites. Opt-out variables and the gl...

The automatic lifecycle hook modifies consumer configuration and injects AI instructions that promote secret disclosure while suppressing review. The reviewer-directed text is social engi...

This is a concrete, default-enabled remote self-update and profile-mutation chain. It can replace the running plugin with attacker-controlled code from the configured update infrastructure.

The automatic postinstall hook performs unconsented mutation of foreign AI-agent skill directories and installs additional dependencies. This is concrete install-hook abuse, not merely us...

This is an automatic install-time chain that executes an opaque native payload to configure external AI agents. The package's release download is not integrity-pinned, increasing the risk...

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces, combined with automatic user-environment dependency installation. The behavior meets the install-hook...

Source inspection confirms automatic transmission of agent transcripts and account credentials to a remote endpoint during ordinary use. This is concrete unconsented data exfiltration, de...

The automatic postinstall hook mutates and deletes project-level Claude Code skills. This meets the policy definition of unconsented install-time mutation of a foreign AI-agent control su...

The automatic postinstall chain persistently alters multiple third-party AI-client configurations to launch this package. This meets the policy for unconsented broad AI-agent control-surf...

The automatic lifecycle chain executes an opaque native binary that installs external AI-agent hooks and changes Codex configuration. This is concrete unconsented install-hook abuse, rega...

The package uses an automatic lifecycle hook to globally install a separate AI-agent package, then retries the behavior at runtime. This meets the install-control-surface blocking boundar...

This is an unconsented postinstall mutation of a foreign AI-agent control surface. The source establishes concrete persistent configuration writes, so it meets the blocking policy despite...

The package automatically modifies consumer-project AI-agent configuration through postinstall. The local-only implementation does not remove the concrete control-surface hijack.

The automatic lifecycle hook overwrites skills in several unrelated agent environments, including Codex and Claude. This is concrete install-hook abuse even though the hook does not make...

The compiled source establishes an import-time default exporter that posts trace data to an unrelated hard-coded HTTP address. This is concrete data-exfiltration behavior, not ordinary pa...

This release performs an unconsented install-time deletion of another named AI coding binary and forms a remote executable delivery chain. Although no credential theft is visible in the J...

The package has no install hook, but its normal runtime path automatically exports conversation data and enables cloud-relayed control of local agent sessions. Those capabilities are acti...

This is a concrete postinstall mutation of foreign AI-agent control surfaces, followed by an automatic package-install path. The behavior meets the install-hook abuse blocking policy desp...

This is an unconsented postinstall mutation of broad AI-agent control surfaces in the consumer project. The lack of network theft does not remove the concrete install-time control-hijack...

This is an unconsented postinstall mutation path for a foreign AI-agent control surface, backed by a native payload containing an explicit safety-bypass command. The remote download path...

This is a concrete automatic install-hook chain that executes an opaque native installer against AI-agent control surfaces. The binary's embedded unsafe agent commands make the resulting...