npm security reports, with evidence.

The package creates an unnecessary, aliased runtime dependency on an older release of itself, producing an opaque nested supply-chain path during installation. This is malicious install-h...

The automatic postinstall hook modifies both Claude Code and Codex global MCP control surfaces. This is concrete install-hook abuse under the stated policy, despite no confirmed network e...

The automatic postinstall mutation of both Claude and Codex configuration is concrete install-hook abuse. It creates an agent execution path without an explicit setup command or user cons...

The automatic lifecycle hook broadly mutates a foreign project and creates AI-agent control files, then persists source-file ownership through the build plugin. Although no exfiltration w...

This is concrete unconsented postinstall mutation of a consumer project's package-manager settings and broad AI-agent control surfaces. The generated review-suppression instruction makes...

This package has an automatic install-time chain that retrieves and installs an opaque native executable from a fixed endpoint while disabling TLS verification. The launcher executes the...

The source establishes an automatic install-time chain that modifies a consumer project and persists itself by rewriting that project's postinstall script. The presence of an older self d...

The package performs automatic, broad consumer-project and AI-agent configuration changes during postinstall, then persists itself in the consumer's own lifecycle script. This meets the p...

The UMD entrypoint is intentionally obfuscated and dynamically evaluates generated code. This is concrete opaque runtime execution in the package's normal import path.

The package has a concrete automatic lifecycle path that broadly mutates OpenCode and consumer project control surfaces, rather than performing transparent package-local setup. This meets...

The package performs broad, privileged host mutation from automatic npm lifecycle hooks. This is concrete install-hook abuse, not a user-invoked setup action.

This is concrete malicious install-time behavior: it mutates consumer AI-agent controls and embeds instructions that facilitate secret disclosure while suppressing review. No network thef...

The install-time hook performs broad host package installation rather than limiting itself to package-local setup. The behavior is activated automatically by npm installation and can invo...

This package contains an automatic, environment-gated remote payload downloader and Windows executable launcher. Its install-time behavior is unrelated to its declared utility functionali...

The package has an automatic lifecycle hook that stages and executes a remotely supplied payload, unrelated to its stated functionality. The CI and production gate plus silent failures fu...

The source establishes a credential collection and forwarding chain involving a GitLab-hosted login page and opaque default service endpoints. Lack of install hooks reduces automatic impa...

The package contains a concealed automatic self-update path from an AI-agent lifecycle hook to a newer release of itself, followed by control-surface mutation. Although it lacks an npm in...

The package contains concrete remote-code-execution and credential-forwarding behavior that is activated by its advertised command. Lack of an install hook reduces automatic reach but doe...

The automatic postinstall hook mutates several foreign, user-wide agent skill directories and enables implicit package-authored behavior. The remote native-app installation further increa...

This is a concrete remote-control and data-exfiltration chain, not a normal local plugin setup. The lack of npm lifecycle hooks does not mitigate the automatic runtime connection and priv...

OpenSSF/OSV malware advisory MAL-2026-14528 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code