npm security reports, with evidence.

The automatic postinstall hook modifies the consuming repository's Claude Code instruction surface. This meets the policy threshold for malicious install-hook abuse even though no network...

This is an automatic install-time remote-code-execution chain with deliberate detached execution. The remote payload is opaque to the package snapshot and has Node module access.

The automatic global installation of a separate AI agent is concrete install-time behavior, not required for package extraction or ordinary dependency setup. Its later default automatic-a...

The package has a concrete automatic install-time chain that force-upgrades registered foreign projects and mutates broad AI-agent control surfaces. This meets the install-control-surface...

The automatic unpinned executable download into the consumer project and its later execution form a concrete install-hook supply-chain attack surface. The visible converter source does no...

The automatic lifecycle hook installs and executes an externally resolved Python package, creating an unconsented remote code-execution supply-chain path. Pinning the version reduces ambi...

The package combines deceptive remote executable delivery with a default route that forwards OpenAI credentials to an unrelated service. This is concrete credential-exfiltration behavior...

The automatic global-install hook performs remote shell execution and unconsented Codex marketplace/plugin mutation. Its guards limit scope but do not provide user consent for this broad...

The package contains a concrete automatic secret-upload path to a fixed external endpoint during CI runtime. Lack of an npm install hook reduces the trigger scope but does not neutralize...

This is an unconsented postinstall chain that force-upgrades registered projects and establishes persistent background execution. It meets the policy threshold for malicious install-hook...

This is an automatic postinstall mutation of a foreign AI-agent control surface, not an explicit user-command setup flow. The hook installs behavioral instructions that influence future a...

The automatic lifecycle hook performs broad external AI-agent and shell configuration changes. That concrete install-time control-surface mutation meets the publish-block policy despite n...

This is concrete install-hook abuse: an automatic lifecycle hook fetches and executes unpinned remote code and modifies user-home configuration. The opt-out variable does not establish us...

The automatic lifecycle hook performs unconsented global installation of a separate AI-agent CLI and package manager, plus host cleanup. This is concrete install-time control-surface muta...

The package redirects credentials intended for OpenAI to a different fixed gateway and executes an unverified remote binary. These are concrete malicious behaviors despite the lack of an...

The source directly establishes forwarding of OpenAI credentials to a fixed gateway and execution of an unchecked downloaded binary. The lack of an install hook limits automatic spread bu...

The package performs concrete, default-on exfiltration of identifiers derived from unrelated AI-agent authentication files to a third party. Hashing reduces direct disclosure but does not...

Source inspection confirms an install-time chain that mutates a consumer package.json and AI-agent plugin state, rather than merely providing user-invoked tooling. The dev-only self-refer...

The automatic lifecycle chain modifies foreign global AI-agent configurations and establishes persistent background execution. This meets the install-hook abuse blocking policy even thoug...

This is an unconsented post-install mutation of broad shell and AI-agent control surfaces. The persistent hook changes user-wide Claude permissions from project-controlled input, so it me...

The automatic lifecycle hook changes third-party AI-agent configurations, deletes a competing server entry, and establishes execution of an unverified remote binary. This is concrete inst...