npm detections from LPM Firewall.

OpenSSF Malicious Packages via OSV confirms @xayz/baileys@6.1.7 as malicious (MAL-2026-17384): Malicious code in @xayz/baileys (npm)

OpenSSF Malicious Packages via OSV confirms @wanzlonely/bails4u@3.0.0 as malicious (MAL-2026-17381): Malicious code in @wanzlonely/bails4u (npm)

OpenSSF Malicious Packages via OSV confirms @rennnpm/baileys@1.0.0 as malicious (MAL-2026-17374): Malicious code in @rennnpm/baileys (npm)

OpenSSF Malicious Packages via OSV confirms @ostyado/baileys@2.0.8 as malicious (MAL-2026-17372): Malicious code in @ostyado/baileys (npm)

OpenSSF Malicious Packages via OSV confirms @wanzlonely/bails4u@2.0.0 as malicious (MAL-2026-17381): Malicious code in @wanzlonely/bails4u (npm)

OpenSSF Malicious Packages via OSV confirms @saazkira/baileys@2.1.9 as malicious (MAL-2026-17377): Malicious code in @saazkira/baileys (npm)

OpenSSF Malicious Packages via OSV confirms anuaja@1.0.0 as malicious (MAL-2026-17386): Malicious code in anuaja (npm)

OpenSSF Malicious Packages via OSV confirms @sairidev/baileys-new@0.3.21 as malicious (MAL-2026-17378): Malicious code in @sairidev/baileys-new (npm)

OpenSSF Malicious Packages via OSV confirms @ostyado/baileys@2.0.6 as malicious (MAL-2026-17372): Malicious code in @ostyado/baileys (npm)

Inspected source establishes unconsented postinstall mutation of foreign, global AI-agent control surfaces. This meets the blocking policy despite the package-aligned purpose and file bac...

Inspected source proves unconsented postinstall mutation of a foreign, user-wide AI-agent control surface. This meets the supplied blocking policy despite runtime hook guards.

The inspected lifecycle chain performs unconsented install-time mutation of a broad AI-agent control surface, meeting the supplied blocking policy. The personal-file whitelist does not gu...

The inspected source proves unconsented postinstall mutation of a broad AI-agent control surface. This meets the supplied blocking policy even though the replacement instructions appear c...

Inspected source establishes unconsented postinstall mutation of global Claude instructions, meeting the supplied blocking policy. Interactive prompts and preservation of existing content...

The inspected postinstall path performs unconsented mutation of the consumer project's AI-agent instructions. This meets the supplied blocking rule for automatic lifecycle writes to a for...

The source establishes automatic, unconsented export of potentially private tool data to a fixed external recipient. This concrete data exfiltration supports blocking independently of the...

The active preinstall hook performs unconsented environment-data exfiltration unrelated to the package's runtime functionality. The collection and actual network send are directly establi...

The source establishes automatic, unconsented export of identifying installation data unrelated to the package's color-generation functionality. This supports blocking for data exfiltrati...

The source establishes automatic, unconsented transmission of identifying local information to an unrelated external recipient. This concrete installation-time data exfiltration warrants...

The inspected source establishes automatic, unconsented export of local identifying information unrelated to the package's functionality. The active collection and network send support a...

The source establishes automatic, unconsented transmission of local identifying information to an unrelated endpoint during installation. This is concrete data exfiltration rather than an...