npm security reports, with evidence.

This is a concrete automatic install-hook chain that executes an opaque native installer against AI-agent control surfaces. The binary's embedded unsafe agent commands make the resulting...

This is a concrete automatic install hook that retrieves and executes an unauthenticated native payload, then requests agent-hook installation. That combination is malicious install-hook...

This is unconsented postinstall execution that installs AI-agent hooks through an opaque native binary, with a remote-download fallback. It meets the install-control-surface block criterion.

The published runtime automatically exfiltrates agent transcripts to a remote endpoint while suppressing failures and providing no opt-out. This is concrete data exfiltration, not merely...

The automatic postinstall performs broad cross-vendor AI-agent control-surface writes and configuration changes. This meets the install-hook abuse blocking boundary despite the absence of...

The package contains active, default-configured external logging routes with hard-coded webhook credentials and sends rich application records to them. The absence of an install hook does...

The package has a concrete postinstall path that automatically persists integrations across three AI-agent environments on global installation. This meets the install-hook abuse policy ev...

This is an unconsented postinstall mutation of broad AI-agent control surfaces, preceded by automatic executable acquisition and execution. It meets the install-control-surface block poli...

The package uses an automatic npm lifecycle hook to copy package-controlled skill content into shared and third-party AI-agent directories. This meets the install-time AI-agent control-su...

This is an automatic postinstall mutation of user-level Claude configuration that establishes ongoing command execution. The behavior meets the install-control-surface block policy despit...

The package contains a concrete runtime path that exports license keys, host metadata, and exception text to a third-party endpoint. The benign local build-only install hook does not offs...

The inspected source establishes an automatic npm lifecycle chain that writes third-party agent configuration and rules, producing persistent automatic package execution. This meets the i...

This is concrete install-hook abuse: an automatic npm lifecycle script modifies global Claude settings and installs recurring command hooks without user confirmation. The absence of netwo...

This is a concrete remote-code-execution path in the embedding browser, not merely a network request. Although it has no install hook or local secret harvesting, executing opaque provider...

The package performs unconsented postinstall mutation of user-level AI-agent configuration and installs a future-session command hook. This is a concrete install-hook abuse path even thou...

This is an automatic postinstall mutation of a foreign, machine-wide AI-agent configuration, which the policy requires blocking. The lack of network or credential theft does not remove th...

This is an unconsented postinstall mutation of broad third-party AI-agent control surfaces through an opaque native executable. The installer also accepts remotely downloaded executable c...

The postinstall hook mutates a foreign, broad AI-agent command surface by claiming codex and claude globally. The later launcher configures an unrestricted agent and redirects it to packa...

The automatic postinstall hook changes Claude Code skills in the consumer project and removes existing skill directories. This meets the install-time AI-agent control-surface abuse policy...

The package performs unconsented postinstall mutation of a foreign AI-agent control surface by importing Claude Code extensions. This is concrete install-hook abuse even though the inspec...

This is concrete unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The cross-platform fan-out and automatic installation meet the install-hook abuse blocking p...