npm detections from LPM Firewall.

This is a concrete import-triggered remote-code-execution chain, not legitimate telemetry behavior. No lifecycle hook is needed because normal dependency import activates it.

This is confirmed import-time staged-payload execution, not normal telemetry behavior. The absence of an npm lifecycle hook does not mitigate the runtime RCE path.

OpenSSF/OSV malware advisory MAL-2026-13537 blocks this version. On module load, index.js requires./_compat.js which assembles remote hostnames from split string literals (e.g. ["oob-work...

OpenSSF/OSV malware advisory MAL-2026-13539 blocks this version. On require of the package's main entry, `_helpers.js` runs a setup() routine that selects a platform-specific payload path...

OpenSSF/OSV malware advisory MAL-2026-13499 blocks this version. On require of the package's main entry, _runtime.js reconstructs attacker-controlled hostnames via Array.join string-split...

OpenSSF/OSV malware advisory MAL-2026-13541 blocks this version. On require('delivery-ci-documentation'), index.js loads _init.js which selects a platform-specific payload endpoint, recon...

OpenSSF/OSV malware advisory MAL-2026-13500 blocks this version. On require() of delivery-ci-dpat, _platform.js runs setup() at module load: it fetches a platform-specific binary over HTT...

Direct source inspection confirms automatic install-time network exfiltration of a host identifier. Although limited in scope, it is concrete behavior rather than a scanner-only signal.

Direct source inspection confirms an unconsented postinstall path that mutates multiple third-party AI-agent configuration and hook files. This meets the blocking boundary for broad forei...

The package contains no confirmed exfiltration or remote payload chain, but its automatic global omp-agent prompt/config mutation meets the install-time AI-agent control-hijack block boun...

The source confirms an automatic postinstall write to multiple foreign global AI-agent control surfaces. Under the stated policy, that concrete unconsented install-time mutation requires...

This is a concrete unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The lack of observed exfiltration does not mitigate the install-time configuration hijack.

The behavior is concrete and automatic at postinstall, not merely a user-invoked setup path. Although no data theft was found, the package mutates a foreign AI-agent control surface durin...

This is concrete unconsented postinstall mutation of broad foreign AI-agent control surfaces, meeting the blocking policy. Absence of exfiltration does not mitigate that install-time cont...

The package has a concrete, unconsented postinstall mutation of a foreign AI-agent control surface. Its video-editing runtime behavior appears feature-aligned, but does not mitigate that...

This is a concrete, unconsented postinstall mutation of foreign and broad AI-agent control surfaces. Local-only binding and release integrity checks do not mitigate the control-surface ta...

Direct source inspection confirms unconsented postinstall writes to broad, foreign AI-agent control surfaces. This meets the blocking policy regardless of the package’s stated automation...

The concealed payload executes automatically on import and contains both network logic and dynamic detached child-process execution. This is concrete malicious behavior, not a package-ali...

The hidden import-time loader, blockchain-based C2 discovery, and remote second-stage execution are concrete malicious behavior unrelated to the package function. No lifecycle hook is req...

Source inspection confirms an import-time hidden executable with concrete backdoor, exfiltration, and persistence functionality. No install hook is needed because normal application impor...

Although activation is user-invoked rather than install-time, the package conceals a remote shell behind a health-client interface. The concrete command-and-control behavior warrants bloc...