npm security reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-15903 blocks this version. On require of the package main, an appended eval(atob(...)) block in dist/index.js queries Ethereum RPC endpoints (eth.blo...

OpenSSF/OSV malware advisory MAL-2026-15904 blocks this version. dist/index.js exports a small tailwind plugin and then runs eval(atob("Z2x...")) on an embedded base64 blob at module load...

OpenSSF/OSV malware advisory MAL-2026-15906 blocks this version. On require() of tailwindcss-animate-styles, index.js runs eval(atob(...)) on a payload appended to the Tailwind plugin. Th...

OpenSSF/OSV malware advisory MAL-2026-15878 blocks this version. The tarball ships only package.json with no code, scripts, main, or bin. The description field contains a ~41KB base64-enc...

OpenSSF/OSV malware advisory MAL-2026-15878 blocks this version. The tarball ships only package.json with no code, scripts, main, or bin. The description field contains a ~41KB base64-enc...

OpenSSF/OSV malware advisory MAL-2026-15878 blocks this version. The tarball ships only package.json with no code, scripts, main, or bin. The description field contains a ~41KB base64-enc...

The exposed web API provides a direct, unauthenticated path from a remote request to child-process execution. The conditional unverified executable download and automatic later execution...

The package contains a concrete credential-collection and transmission path to a fixed IP with certificate verification disabled. The lack of an install hook does not neutralize the user-...

The opaque runtime is not aligned with the minimal package metadata and deliberately hides an AI-message steering path. Although it has no install hook, the concrete user-invoked behavior...

The package performs unconsented postinstall execution of a downloaded native payload and automatically installs skills into local AI agents. Hash checking constrains the selected downloa...

The lifecycle hook performs broad, automatic mutations of consumer files and creates AI instruction files. This is a concrete unconsented install-time AI-agent control-surface mutation, s...

This is an unconsented npm postinstall mutation of broad foreign AI-agent control surfaces. The existing-file guard limits scope but does not establish user consent for automatic overwrites.

The automatic lifecycle hook makes broad OpenCode configuration and plugin changes in the consumer project, including registration of an additional browser plugin. This meets the install-...

The package is a disguised browser redirect loader rather than a usable npm library. Its obfuscation, remotely supplied encrypted destination, and challenge-gated automatic navigation est...

The automatic lifecycle script both installs an unverified remote executable and writes behavior-bearing configuration into multiple foreign AI-agent directories. This is concrete install...

The hard-coded default external API host and automatic forwarding of a consumer access token form a concrete runtime credential-exfiltration path. The absence of lifecycle hooks limits th...

The default external endpoint, cookie-token forwarding, and administrative POST operations form a concrete exfiltration path unrelated to the declared package presentation. There is no in...

The automatic postinstall mutation of a global Claude Code command surface is concrete, broad, and unconsented. This meets the install-control-surface block policy even though the install...

The package combines automatic postinstall execution, broad consumer AI-agent configuration and hook writes, network-backed plugin installation, and detached postinstall reconciliation. T...

This is an unconsented postinstall mutation of both a broad consumer project and AI-agent control surfaces. The behavior is concrete and automatic, so it meets the install-hook abuse bloc...

OpenSSF/OSV malware advisory MAL-2026-15870 blocks this version. vitest-cli-dev@10.0.7 is a typosquat package: its name and homepage suggest a vitest tool, but the tarball contains a copy...