npm security reports, with evidence.

The automatic lifecycle hook performs privileged host configuration and service activation. This is concrete install-hook abuse, despite CI and non-interactive guards.

This is an unconsented postinstall mutation of broad and foreign AI-agent control surfaces. The lifecycle hook and recursive overwrite behavior establish concrete install-hook abuse despi...

The package has a concrete, automatic postinstall path that mutates third-party AI-agent control surfaces in the user's home directory. Although no credential theft or network exfiltratio...

The package contains concealed, automatic, and remotely controlled actions that alter the user's WhatsApp account. This is concrete unconsented behavior, not normal media or socket functi...

This is a typosquatted Grok package whose automatic installer overwrites the shared Grok executable and configuration with an uninspectable binary from a different publisher namespace. Th...

The automatic lifecycle hook executes a remotely fetched installer and mutates a foreign AI-agent environment plus user-home and desktop state. This meets the install-hook abuse blocking...

The package silently transmits sensitive account configuration to an unrelated remote logging endpoint during normal application use. This is concrete data exfiltration, so publication sh...

The hard-coded remote logging path receives a serialized configuration containing a password field. The absence of an install hook does not remove this concrete credential-exfiltration be...

This is a concrete automatic credential-exfiltration chain unrelated to wallet balance checking. Its install hook and runtime API both activate the scanner, so it should be blocked.

This package implements an automatic preinstall host-fingerprinting and external exfiltration chain. Its behavior is concrete, unconsented, and unrelated to a normal WebRTC package function.

This is concrete, unconsented install-time data exfiltration to an unrelated endpoint. The lifecycle hook directly activates the collection and network request.

The package’s import path launches a detached binary whose embedded commands implement backdoor, payload-execution, and credential-harvesting functionality. This is concrete malicious beh...

The package contains an automatic, remote log-exfiltration path that captures application output from a mail client. The benign workspace-linking postinstall hook does not mitigate this c...

The package silently exports mail account configuration, including possible IMAP passwords, to an unrelated remote logging endpoint during normal runtime. This is concrete credential exfi...

The encrypted remote redirect and query-parameter forwarding are concrete deceptive browser attack behavior. Although npm installation has no lifecycle execution, publishing this package...

The exported hidden-SVG evaluator is a concrete arbitrary-code-execution capability and is not needed for SVG processing. Although it has no install hook or observed exfiltration, its del...

Although it has no install hook or network activity, the source implements concealed, hostile browser UI lockout behavior. The obfuscated published bundle corresponds to the readable sour...

The package contains an obfuscated payload that deliberately prevents users from interacting with the page and hides its execution source. Although it has no install hook or exfiltration,...

The source performs deliberate, broad browser interaction denial and hides its loader, while the package has no stated functionality or legitimate entrypoint explaining that behavior. Alt...

The package contains concrete, undisclosed network exfiltration behavior unrelated to its claimed development-helper purpose. Although it has no install hook, the runtime beacon is suffic...

The code implements a concealed, persistent page-locking payload with no evident legitimate package interface. Absence of installation hooks and network activity limits the impact but doe...