npm security reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-15984 blocks this version. Package advertises itself as a public-RPC gas price checker but on first call to the exported getGasPrice() API in src/env...

OpenSSF/OSV malware advisory MAL-2026-15943 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-15943 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-15943 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-15943 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-15943 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-15943 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-15943 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-15943 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

The package combines broad AI-agent control-surface writes with prompt/reply exfiltration and remotely delivered executable hook updates. Although setup is CLI-triggered and not an npm li...

The package has no install hook, but its normal runtime behavior automatically exports agent transcripts and enables cloud-delivered commands. The direct curl-to-sh updater adds a concret...

The package performs broad, automatic AI-agent and project mutation during postinstall, rather than requiring an explicit user command. Its detached reconciliation mechanism makes those c...

The package performs unconsented, automatic installation tracking to an unrelated vendor-branded endpoint. This is concrete install-time data exfiltration rather than normal user-invoked...

The automatic postinstall hook broadly rewrites a consumer project and installs a plugin that restores package-owned files, so it exceeds transparent package setup. No install-time creden...

The automatic global postinstall hook mutates a broad AI-agent process control surface by signalling processes selected with a generic marker. Its guardrails reduce exposure but do not es...

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The lack of network access in the installer does not remove the persistence and control-surface risk.

This is an unconsented postinstall mutation of broad AI-agent control surfaces, including persistent instructions and command hooks. The automatic lifecycle chain meets the publish-block...

This is an automatic install-time mutation of foreign AI-agent control surfaces across multiple products. Although scoped to global installs and using a loopback endpoint, it materially c...

The automatic postinstall hook mutates a broad set of foreign AI-agent control surfaces, meeting the install-control-surface block policy. No runtime self-dependency or install-time netwo...

The package performs unconsented postinstall mutation of both consumer project and AI-agent control surfaces, including third-party Claude plugins and user-wide Codex registrations. This...