npm detections from LPM Firewall.

Direct source inspection confirms an install-time cloud-credential harvesting and exfiltration command. There is no benign package functionality to offset this behavior.

The global-install guard limits the trigger but does not make the mutation user-invoked. The package performs the policy-defined blocking behavior even though no network exfiltration was...

The package contains a concealed remote code loader whose downloaded response is directly executed. Although it has no install hook, this is a concrete arbitrary-code execution surface fo...

Source inspection confirms unconsented install-time collection and transmission of local environment metadata to a callback domain. This is concrete data exfiltration behavior.

Direct manifest inspection confirms two install-time scripts that fingerprint and exfiltrate the installer environment to an unrelated external callback domain. The empty runtime entrypoi...

The package performs unconsented install-time environment fingerprinting and external transmission, with no functional code that would justify it. This is concrete data exfiltration behav...

Direct source inspection confirms two automatic install hooks that exfiltrate host and environment metadata to an unrelated callback domain. The package provides no corresponding runtime...

Direct manifest inspection confirms duplicated install-time collection and outbound callback requests. The empty entrypoint and generic README provide no package-aligned purpose for the b...

Source inspection confirms a concrete automatic exfiltration command in the sole package file. This is malicious install-time behavior.

Direct source inspection confirms an unconsented install-time collection and external transmission of environment data and CI credentials. This is concrete credential exfiltration, not a...

The automatic multi-vendor global AI-agent skill installation is concrete unconsented control-surface mutation, meeting the block policy. The remote binary download increases impact but i...

The package performs a concrete global-install postinstall modification of Cursor configuration and commands. The global-install guard and lack of network activity do not remove the uncon...

The preinstall network requests exfiltrate machine and account identifiers without a user command or package functionality justification. This is concrete install-time data exfiltration.

The package performs unconsented install-time transmission of host-derived identifiers to an external domain, which is concrete data exfiltration. Its explicit runtime API upload does not...

Source establishes a remote-controlled, automatic account-action chain that follows and mutes newsletters for a connected user. The install hook is benign, but does not mitigate this runt...

The appended import-time payload is unrelated to a Tailwind forms plugin and contains concrete obfuscated staging, eval, and detached process execution. The lack of lifecycle hooks does n...

Source confirms a concrete, automatic, remotely controlled action on the user’s authenticated WhatsApp account. The install hook itself is benign, but does not mitigate the runtime payload.

This is a concrete, remotely controlled and unconsented account-action chain in the default runtime path. The install hook itself is benign, but it does not mitigate the runtime behavior.

The source contains a concrete, automatic and remotely directed modification of a user's WhatsApp account rather than a package-aligned feature invoked by the caller. The install hook is...

This is concrete, automatic remote-controlled mutation of a user’s WhatsApp account, unrelated to the requested socket connection. The install hook is benign, but does not mitigate the ru...

The automatic remote-controlled modification of a user's WhatsApp account is concrete unauthorized behavior. The lifecycle hook itself is benign, but it does not mitigate the runtime payl...