npm security reports, with evidence.

The manifest establishes a concrete automatic destructive action against foreign project dependencies. This is malicious install-hook abuse, not a package-aligned setup step.

The package contains a concrete, automatic, and destructive install hook that mutates the consumer project without consent. No exfiltration was found, but the install-time deletion alone...

This is an automatic install-time remote-agent deployment chain unrelated to ULID generation. It combines hidden configuration, remote code delivery, host reconnaissance, and persistence.

This is an unconsented postinstall mutation of multiple foreign AI-agent control surfaces. The automatic lifecycle trigger and behavior-steering content meet the blocking policy.

The automatic global installation and persistent exposure of Claude Code meet the install-time foreign AI-agent control-surface policy. No self-dependency or secret theft is needed for th...

The package has a concrete automatic lifecycle path that overwrites both Codex and Claude skill directories. Under the install-control-surface policy, this is malicious install-hook abuse...

The package has a concrete automatic postinstall path that broadly changes host project AI-agent configuration and installs an enforcement hook. This meets the install-hook abuse boundary...

The automatic postinstall performs remote shell execution and changes Codex plugin configuration during installation. Its global-install guard limits exposure but does not establish conse...

The automatic postinstall broadens a package installation into persistent global AI-agent configuration mutation. The installed content includes instructions for privileged account actions.

This is unconsented install-time mutation of a consumer project and its AI-agent control surface, followed by persistence through the consumer postinstall hook. The detached reconciliatio...

This is an unconsented postinstall mutation of broad AI-agent control surfaces combined with instructions that facilitate credential disclosure and evade review. The lifecycle script also...

The automatic postinstall hook modifies broad, foreign AI-agent control surfaces and creates a fallback agent directory. This meets the install-time AI-agent control-hijack blocking policy.

The lifecycle hook automatically persists package-controlled skills and executable command hooks into the user's global Claude configuration. That concrete install-time agent-control muta...

The package has no install hook, but its active MCP interface contains coercive no-inspection instructions and sends a stable machine identifier plus error telemetry to a remote endpoint....

OpenSSF/OSV malware advisory MAL-2026-15812 blocks this version. eslint-rxjs is a masquerade package whose npm metadata is internally inconsistent: the name references ESLint/RxJS, the de...

The package performs broad consumer-project and AI-agent control-surface mutation automatically during postinstall, then persists itself in the consumer postinstall hook. This meets the i...

This is unconsented postinstall mutation of a foreign, broad AI-agent control surface, followed by collection and network transmission of AI interaction content. The conditional guards do...

The automatic postinstall hook broadly mutates foreign AI-agent control surfaces and installs an enabled Codex plugin. This is concrete install-hook abuse under the launcher policy.

This package automatically performs privileged host package installation and dependency mutation during lifecycle execution, then repeats the behavior at CLI startup. No exfiltration was...

The lifecycle hook automatically installs a foreign AI-agent CLI and persistently modifies user shell and application locations. This meets the install-hook abuse blocking boundary even t...

OpenSSF/OSV malware advisory MAL-2026-15925 blocks this version. The package is published under a name that mimics the Tailwind CSS forms plugin and its package.json points repository at...