npm detections from LPM Firewall.

The malicious remote-access configuration executes automatically at install time and materially weakens host authentication and visibility. It is not merely an installer primitive or an e...

Concrete postinstall behavior creates a hidden privileged remote-access path and weakens RDP security. This exceeds a benign installer’s expected scope and is executed automatically on in...

The package embeds active third-party webhook credentials and transmits broad runtime records to them by default. The absence of an install hook does not mitigate this runtime exfiltratio...

The package’s postinstall silently modifies global Claude Code configuration and installs broad lifecycle hooks, meeting the firewall block policy for unconsented AI-agent control-surface...

Direct source inspection confirms an unconsented install-time reverse shell with a hard-coded command-and-control endpoint. The benign date formatter does not justify this behavior.

The lifecycle script performs a concrete default postinstall mutation of the consumer’s Cursor configuration and installs automatic hook execution. This meets the firewall block boundary...

The install hook performs unconsented mutation of both the consuming project's package manifest and GitHub Copilot instruction surface. That concrete lifecycle behavior meets the block bo...

Direct source inspection confirms an install-time metadata collection and external exfiltration chain. The package has no other source files establishing a legitimate package function.

The package deliberately hides an auto-running browser loader that remotely retrieves and evaluates code. Its lack of an install hook reduces install-time scope but does not remove the co...

The sole package behavior is an install-time cloud-metadata collection and external transmission chain, with no package functionality to justify it.

The package contains a concrete automatic credential-upload path to a fixed external backend. The absence of an npm lifecycle hook does not remove the runtime exfiltration behavior.

The source implements an obfuscated remote-code loader with automatic browser activation. Absence of lifecycle hooks limits install-time impact but does not remove the concrete runtime RC...

The only package file defines an automatic install-time identity-exfiltration command. This is concrete unauthorized data exfiltration.

The sole package file defines a postinstall collector/exfiltrator with no package functionality or user-invoked justification. The concrete install-time transmission warrants blocking.

Direct manifest inspection confirms an automatic postinstall hook that harvests the installer username and exfiltrates it. This is concrete malicious install-time behavior.

The sole package behavior is an automatic install hook that harvests ECS metadata and transmits it to an unrelated external endpoint. This is a concrete exfiltration chain, not a package-...

The package has concrete install-time project and AI-agent control-surface writes, not merely dormant CLI functionality. This meets the block boundary for unconsented postinstall mutation...

The package performs unconsented postinstall writes to the consumer project and GitHub Copilot instruction surface. Although no install-time exfiltration was found, this meets the blockin...

The only package source defines an automatic install-time collection and exfiltration chain targeting ECS metadata and host identity.

The only package file defines an install-time metadata-harvesting and external-exfiltration chain. This is concrete malicious behavior, not a package-aligned operation.

The sole package behavior is an install-time collection-and-exfiltration pipeline targeting ECS metadata and an unrelated external host.