npm detections from LPM Firewall.

The package's declared CommonJS entrypoint resolves to a bundle containing active, delayed browser disruption and unsolicited audio playback for a targeted audience. This supports a malic...

The package’s published import entry contains targeted browser disruption that disables interaction and plays remote audio. This is active behavior in the shipped bundle, so the evidence...

Inspected source confirms targeted, delayed browser disruption in the package's browser bundle. This is concrete protestware behavior, so the package should be blocked.

The published browser bundle includes targeted page disruption and unwanted external audio playback. This is concrete malicious protestware behavior, so publication should be blocked.

The package is malicious because dist/81.js contains active, targeted browser disruption: it disables interaction and plays looping audio from an unrelated external host. The manifest's p...

The targeted disruption and unsolicited audio behavior in dist/81.js establish protestware. The package should be blocked.

The browser bundle contains targeted protestware that disrupts page interaction and plays unsolicited looping audio. This is concrete malicious behavior and warrants blocking publication.

The inspected browser bundle implements conditional, delayed disruption and remote audio playback. This is active protestware behavior, so the package should be blocked.

The published browser bundle contains concrete, targeted disruption: it disables page interaction and plays looping external audio after a language, host, and date check. This supports bl...

The bundled code performs targeted browser disruption for Russian-language visitors on selected host suffixes. This is concrete protestware behavior and warrants blocking publication.

The targeted browser disruption is concrete and active, so the package is malicious. The scanner's environment and execution hints do not establish another attack; the inspected manifest'...

The shipped browser bundle contains active, delayed browser disruption targeted by language and host. This is concrete protestware behavior, so the package should be blocked.

The shipped browser bundle has a concrete, targeted browser disruption behavior with an unrelated external audio endpoint. This supports a malicious verdict and install-hook abuse is not...

The root-only Linux configuration change is an automatic, persistent relaxation of sandbox protections in a postinstall hook. The global-install gate and opt-outs limit activation, but do...

The package performs unconsented install-time writes to global AI-client MCP configuration and registers a command that resolves brokre@latest. This is a concrete AI-agent control-surface...

The postinstall hook automatically runs the global installer, which writes to several user-level AI-agent configuration locations and enables Codex workspace network access. This is concr...

The entrypoint bundle contains concrete, targeted browser disruption that is unrelated to calibration functionality. This supports blocking the package as malicious protestware.

The main runtime bundle contains targeted browser disruption with a concrete user impact. The conditional trigger does not make the behavior benign.

The published browser entrypoint contains active, delayed disruption based on browser language and host suffix, followed by blocking page interaction and looping external audio. This supp...

The published browser entrypoint contains targeted, delayed page disruption and external audio playback. This is concrete protestware behavior, so the package should be blocked.

The package entrypoint contains a delayed, geographically and linguistically targeted browser disruption that plays looping political audio. This is concrete protestware behavior, so the...