npm security reports, with evidence.

This is a concrete install-hook abuse chain: an npm postinstall silently installs a separate global AI-agent CLI and persists environment changes. The lack of direct credential theft does...

The package has an automatic postinstall path that writes its instructions into multiple, including discovered, AI-agent skill directories. This is unconsented broad AI-agent control-surf...

The package has a concrete automatic postinstall chain that deploys content across broad, foreign AI-agent configuration directories. Its conflict safeguards do not make the automatic cro...

The package contains concrete runtime credential collection and transmission to external hosts, plus an automatic install-time npx invocation. The provider is automatically enabled based...

This is an automatic postinstall mutation of Claude Code's global or project skill control surface, including overwriting matching skills and executing copied modules. The lack of network...

The automatic postinstall hook writes a globally loaded, behavior-bearing agent skill into multiple existing harnesses. Its broad trigger rules and shell permissions make this a concrete...

This is a concealed, remotely controlled browser redirect packaged as an npm entry point. The lack of install hooks does not mitigate the delivered phishing or malware-routing behavior.

The package performs unconsented postinstall mutation of OpenCode configuration and injects binding instructions into future agent sessions. This is concrete install-hook abuse even thoug...

This is an automatic postinstall mutation of a broad, foreign AI-agent control surface. The package installs event-triggered commands and permissions into global Claude Code configuration...

The package is a persistent telemetry agent that transmits local configuration content and cloud identity data after wiring itself into AI-agent hooks. The absence of an automatic npm lif...

The package has a concrete automatic postinstall hook that invokes an AI-agent skills synchronization command. This is unconsented install-hook abuse of a foreign control surface.

OpenSSF/OSV malware advisory MAL-2026-15854 blocks this version. The package's preinstall lifecycle script enumerates process.env and collects any variable whose name matches credential-s...

OpenSSF/OSV malware advisory MAL-2026-15851 blocks this version. The package's preinstall lifecycle script iterates process.env and filters keys for credential-shaped substrings (key, sec...

OpenSSF/OSV malware advisory MAL-2026-15856 blocks this version. The package advertises itself as a UI component library but index.js only exports empty stub Button/Input/Card functions....

OpenSSF/OSV malware advisory MAL-2026-15855 blocks this version. The package's declared preinstall script iterates process.env, filters keys against a broad credential/secret keyword list...

OpenSSF/OSV malware advisory MAL-2026-15852 blocks this version. @quantixfinance/sdk@1.0.0 ships an inert library body (index.js exports an empty QuantixSDK class and a createClient stub)...

OpenSSF/OSV malware advisory MAL-2026-15853 blocks this version. The package's preinstall lifecycle script enumerates process.env and collects any variable whose name matches credential-s...

OpenSSF/OSV malware advisory MAL-2026-15857 blocks this version. The package advertises itself as a wallet library but ships a 67-byte no-op index.js; the entire payload is a preinstall l...

OpenSSF/OSV malware advisory MAL-2026-15849 blocks this version. The package's preinstall lifecycle script iterates process.env and collects any variable whose name matches a broad list o...

OpenSSF/OSV malware advisory MAL-2026-15850 blocks this version. The package's preinstall lifecycle script enumerates process.env and filters keys by a broad secret-shaped substring list...

OpenSSF/OSV malware advisory MAL-2026-15848 blocks this version. The package's preinstall lifecycle script runs automatically on npm install. It iterates process.env and collects every va...