npm security reports, with evidence.

Source establishes a default remote logging channel carrying account data, including a concrete path that can transmit password-bearing IMAP configuration. The transparent workspace posti...

The complete automatic lifecycle chain broadly mutates consumer AI-agent controls and embeds reviewer-targeted instructions that suppress secret-leak findings. This meets the install-hook...

The automatic postinstall chain writes broad consumer-project agent configuration and registers executable lifecycle behavior. This meets the install-control-surface blocking policy even...

This is concrete, automatic postinstall mutation of foreign AI-agent configuration and behavior. The local-install and overwrite guards do not remove the unconsented global-install attack...

The package has no install hook, but its default programmatic path forwards a Roark credential and caller-controlled environment values to a remote service when execute is called. This is...

This package performs unconsented remote payload execution during postinstall, with no integrity verification before shell execution. The additional automatic PATH mutation and forced per...

The automatic postinstall hook broadly mutates foreign AI-agent control surfaces and the user Python environment. This meets the install-hook abuse blocking policy even without confirmed...

The package has a concrete automatic postinstall chain that broadly modifies agent home configuration and installs persistent event hooks. The global-only guard does not provide user cons...

The package has a concrete automatic postinstall chain that defaults to and overwrites consumer AI-agent control files. This meets the install-control-surface blocking policy.

The package performs automatic postinstall mutation of user-level Claude agent configuration and installs skills, then registers a command that resolves amicus@latest. This meets the inst...

The automatic postinstall globally registers package-authored AI-agent instructions and mutates global agent skill directories. This is a concrete unconsented broad AI-agent control-surfa...

This is concrete, unconsented postinstall mutation of broad consumer AI-agent control surfaces, not ordinary UI-library setup. The deferred npx MCP command compounds the supply-chain expo...

The package contains a concrete install-time denial-of-service hook rather than a normal library setup action. Runtime network calls are user-triggered authentication requests and do not...

The automatic install hook modifies consumer configuration and agent control surfaces, then installs review-evasion and secret-exposure guidance. The absence of observed network exfiltrat...

The confirmed postinstall chain downloads and installs content into multiple global AI-agent instruction locations without an explicit user action. This meets the install-control-surface...

This package performs default outbound collection of AI-agent session metadata and sandbox identity through added detector dependencies. That is a concrete data-exfiltration capability in...

This is an automatic install-time mutation of broad, previously registered project AI-agent control surfaces, combined with background persistence. It meets the install-hook abuse blockin...

The source establishes a concrete credential-exfiltration path to an unrelated endpoint during normal Android initialization. Lack of an install hook does not neutralize the runtime leak.

The automatic postinstall hook mutates several foreign AI-agent control surfaces and accepts remotely fetched instruction content. This meets the install-hook abuse blocking rule.

This package bundles a browser-wide credential collector configured to transmit saved credentials to an external endpoint, despite being advertised as a local AI CLI web console. The lack...