npm security reports, with evidence.

The automatic global lifecycle hook modifies several unrelated AI-agent instruction surfaces and installs a remote-instruction requirement. The explicit update command's registry traffic...

This is an unconsented install-time mutation of broad foreign AI-agent control surfaces, amplified by a mandatory remote instruction fetch. The behavior is concrete and reachable from the...

The automatic postinstall chain writes a bundled capability into global locations for many foreign AI agents. Collision safeguards do not provide user consent for this broad control-surfa...

This is an unconsented postinstall mutation of a broad foreign AI-agent control surface. The guarded implementation does not remove the automatic, cross-agent configuration change.

The automatic lifecycle hook installs a bundled skill globally across a broad set of foreign AI-agent integrations without explicit user action. This is concrete install-hook abuse of an...

This package performs an unconsented postinstall mutation of broad third-party AI-agent skill locations. Conflict checks reduce accidental overwrites but do not remove the automatic contr...

The package has no observed exfiltration or remote execution, but its automatic postinstall writes behavior-bearing content into two foreign user-level agent skill roots. This meets the i...

The source establishes an unconsented postinstall mutation of broad, foreign AI-agent control surfaces. No network or secret theft is needed for this install-hook abuse to warrant blocking.

The automatic lifecycle hook mutates broad, foreign AI-agent skill locations and installs instructions that direct agents to operate a trading system. This meets the install-control-surfa...

This is unconsented postinstall mutation of broad AI-agent control surfaces. The absence of network or shell execution does not remove the concrete persistence and control-surface risk.

The package has no observed exfiltration or remote payload behavior, but its postinstall hook persistently modifies broad AI-agent skill locations. That concrete lifecycle control-surface...

This is concrete automatic install-time modification of multiple user-wide AI-agent control surfaces, not an explicit user-command setup. The injected instructions create a continuing pat...

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The local payload and absence of secret theft do not neutralize the automatic cross-platform agent...

The automatic lifecycle hook broadly mutates consumer AI-agent configuration paths, meeting the install-control-surface blocking policy. No additional exfiltration or network behavior is...

This is concrete postinstall mutation of foreign and broad AI-agent control surfaces. The automatic fan-out, settings change, and agent installation meet the install-hook abuse blocking p...

The package has a postinstall hook that automatically fan-outs package-controlled AI-agent content across global directories and changes a global Claude Code preference. This is concrete...

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The absence of observed exfiltration does not remove the concrete control-hijack risk.

This is an automatic postinstall mutation of foreign and broad AI-agent control surfaces, including global skills, agents, and Claude settings. The behavior meets the install-hook abuse b...

The package combines an automatic install hook with persistent edits to multiple user AI-agent instruction files and explicit wallet-tool steering. That is a concrete AI-agent control-hij...

The package has a concrete postinstall hook that persistently modifies foreign AI-agent instruction files to influence later wallet-tool decisions. This meets the install-time AI-agent co...

This is an unconsented postinstall mutation of multiple foreign AI-agent control surfaces, including a newly created Cursor rules directory. The automatic redirect concerns wallet operati...