npm security reports, with evidence.

The package performs concrete, automatic collection and external transmission during preinstall. Its research-oriented claims do not establish consent for exfiltration in downstream insta...

This is a concrete automatic install-time and import-time data beacon to a third-party endpoint. Although the data is limited to host metadata, the package provides no consent mechanism a...

OpenSSF/OSV malware advisory MAL-2026-16005 blocks this version. The OpenSSF Package Analysis project identified 'agentrc-security-poc-policy' @ 1.0.0 (npm) as malicious.

OpenSSF/OSV malware advisory MAL-2026-16006 blocks this version. package.json declares a preinstall lifecycle script that runs on `npm install` and issues a wget request to https://webhoo...

OpenSSF/OSV malware advisory MAL-2026-1380 blocks this version. The package cline was found to contain malicious code.

OpenSSF/OSV malware advisory MAL-2026-15940 blocks this version. Package name resembles an internal Swisscom OCE package and is published at version 9999.0.0 to win resolution against a p...

OpenSSF/OSV malware advisory MAL-2026-15942 blocks this version. The package name and 9999.0.0 version are consistent with a dependency-confusion lure targeting an internal `omni-channel-...

OpenSSF/OSV malware advisory MAL-2026-15941 blocks this version. Package name resembles an internal-scoped name and uses an implausibly high version (9999.0.0) consistent with dependency-...

OpenSSF/OSV malware advisory MAL-2026-15940 blocks this version. Package name resembles an internal Swisscom OCE package and is published at version 9999.0.0 to win resolution against a p...

OpenSSF/OSV malware advisory MAL-2026-15942 blocks this version. The package name and 9999.0.0 version are consistent with a dependency-confusion lure targeting an internal `omni-channel-...

OpenSSF/OSV malware advisory MAL-2026-15939 blocks this version. omni-channel-oid-frontend ships a preinstall.js lifecycle script that fires automatically on `npm install`. The script col...

The concrete postinstall behavior mutates a foreign, home-directory AI-agent skill surface automatically. The lack of network or secret theft does not neutralize that control-surface take...

The package performs an unconsented postinstall write to a broad AI-agent control surface in the consumer project. Although no exfiltration or network activity was found, this concrete li...

This is concrete install-time mutation of foreign and broad AI-agent control surfaces, including automatic pre-message behavior. It meets the policy threshold for malicious install-hook a...

The automatic postinstall performs broad mutation of foreign AI-agent configuration and instruction files, plus package-manager installs. This is a concrete unconsented agent-control hija...

The automatic lifecycle hook modifies multiple external AI-agent skill directories, including fallback targets, rather than limiting setup to an explicit user command or package-owned loc...

The package performs an unconsented global-install lifecycle mutation of multiple foreign AI-agent control surfaces, then injects content into their sessions. No network theft was found,...

This is an automatic postinstall mutation of broad, foreign AI-agent control surfaces. The global-only guard and opt-out do not make the install action consensual.

The automatic lifecycle hook mutates a global AI-agent skill directory and can recursively delete a pre-existing matching entry. The weak installation guard makes this occur beyond an exp...

The automatic global postinstall mutates a shared AI-agent skill control surface and can recursively remove existing matching content before replacing it. This is concrete install-hook ab...

The install-time overwrite of a foreign global AI-agent instruction file is concrete unconsented control-surface mutation. No exfiltration was found, but the lifecycle behavior meets the...