npm security reports, with evidence.

This is concrete unconsented postinstall mutation of multiple foreign AI-agent configuration surfaces, coupled to package-controlled command execution and dependency patching. Safeguards...

This is an automatic lifecycle-driven remote code execution chain with broad machine mutation. Checksum verification of artifacts does not protect the separately piped remote script or pi...

The automatic lifecycle hook establishes a concrete AI-agent control-surface mutation chain through an opaque native binary. This meets the install-hook abuse blocking policy even though...

This is an unconsented postinstall mutation of broad foreign AI-agent control surfaces. Checksum verification reduces tampering risk for the downloaded binary but does not establish conse...

The package performs an unconsented postinstall global installation of another AI-agent CLI. That concrete lifecycle mutation warrants blocking even though no credential theft was found i...

The documented default and executable default conflict, while the executable directly posts prompted credentials to the undisclosed fixed host. This is concrete credential collection rath...

This is an unconsented postinstall mutation of a consumer project's broad AI-agent control surface. The safeguards against clobbering do not remove the automatic control-surface write.

The package performs automatic postinstall mutation of both Claude Code and Codex global MCP configuration. This meets the install-control-surface blocking policy even though the inspecte...

The package has a concrete automatic postinstall chain that rewrites Claude Code and Codex configuration to execute its MCP server. This meets the install-hook abuse blocking policy regar...

The automatic lifecycle hook executes opaque remote code from a mutable branch, creating a concrete remote-code-execution supply-chain path. Skip guards do not protect normal global insta...

The automatic postinstall invokes an opaque native binary to modify Codex and Claude Code hooks. That is a concrete unconsented install-time AI-agent control-surface mutation.

The package directly harvests an available GitHub credential and transmits it to an opaque external endpoint. The absence of an install hook does not mitigate credential exfiltration when...

This is an unconsented postinstall mutation of a broad consumer AI-agent control surface. The installed hooks actively inject policy into agent sessions, which meets the blocking policy e...

This is an unconsented postinstall mutation of a broad global AI-agent control surface. Exclusive creation avoids overwrites but does not remove the risk of first-install persistence.

The source establishes a direct credential transmission to a fixed external gateway. Although it is runtime-triggered rather than install-time, this is concrete credential-exfiltration be...

This is a concrete, automatic postinstall path that executes a remote binary and installs skills into detected AI agents without an explicit user command. Hash verification does not make...

This is an automatic install-hook remote-code-execution chain, not a transparent bundled installer. The local skip guards do not mitigate execution of mutable remote code during the opted...

The package has a concrete automatic install-time chain that modifies a consumer project and activates multiple AI-agent integrations. This meets the install-hook abuse policy even though...

The automatic lifecycle hook modifies several unrelated global AI-agent instruction directories and accepts mutable remote instruction content. This is a concrete install-hook control-sur...

This is an unconsented postinstall mutation of broad consumer AI-agent configuration and instructions. The explicit hook command does not remove the automatic MCP and guidance changes.