npm detections from LPM Firewall.

This is concrete broad credential collection and remote transmission to a package-controlled cloud endpoint, not merely a required cloud feature limited to the project. The install hook a...

The lifecycle chain concretely performs broad agent-control and hook persistence in the consuming project. Although no exfiltration was found, this meets the blocking policy for unconsent...

This is concrete unconsented postinstall mutation of foreign AI-agent control surfaces, combined with remote binary execution and host security-setting changes. It meets the firewall bloc...

The package executes an opaque, network-capable native binary during ordinary import and detaches it from the host process. The visible JavaScript functionality does not require that binary.

This package ships an obfuscated remote redirect loader behind a counterfeit security-verification flow. The absence of install hooks limits install-time impact but does not negate the ac...

The distributed main entrypoint contains an obfuscated, import-triggered remote payload loader unrelated to the package’s stated functionality. Absence of lifecycle hooks does not mitigat...

Direct source inspection found a concrete unsolicited postinstall network callback that fingerprints the installing host. This is malicious install-time data exfiltration, not a package-a...

The sole package file defines an automatic install-time callback that collects and transmits local environment and directory information to an unrelated webhook endpoint. This is concrete...

Direct manifest inspection confirms an unconsented install-time external callback carrying host identity. The stated research purpose does not remove the package's concrete attack behavior.

This is concrete, unconsented install-time host-identifying data exfiltration to an external callback endpoint. The minimal package contents do not reduce the confirmed lifecycle attack.

The only package file defines an automatic install-time external callback that fingerprints the installing host. This is concrete unconsented data exfiltration.

Source confirms unconsented postinstall mutation of foreign AI-agent control surfaces. The absence of credential exfiltration does not remove this concrete install-time control-surface at...

The package is an active remote-payload installer with concealed persistence and foreign AI-tool configuration mutation. Although it lacks npm lifecycle hooks, these concrete behaviors wa...

This is concrete unconsented postinstall mutation of foreign AI-agent control surfaces. Documentation does not eliminate the install-time control-hijack risk.

Direct inspection confirms install-time mutation beyond package-owned state, including automatic installation of a third-party AI-agent CLI and persistent PATH changes. No exfiltration wa...

Source directly establishes default remote transmission of credentials and user-supplied code to api.stainless.com. No install hook is involved, but the runtime exfiltration is sufficient...

The package performs unconsented postinstall mutation of foreign AI-agent control surfaces, meeting the block policy. Its guarded global-install condition and some verified desktop handli...

The package performs agent-hook installation automatically during npm postinstall through an opaque native executable. This meets the block policy for unconsented install-time broad AI-ag...

This is concrete persistent collection and exfiltration of sensitive local AI-agent transcript content to a package-controlled endpoint, activated by normal CLI use without a separate opt...

The package transmits authentication credentials and optional 2FA material to a hard-coded non-Facebook endpoint during normal recovery behavior. The absence of lifecycle hooks does not m...