Loading npm security reports…
Skip to main contentSoft block: AI-agent control surface2026-10-01 14:43Soft block: AI-agent control surface2026-10-01 14:40Soft block: AI-agent control surface2026-10-01 14:34Install Hook Abuse2026-10-01 14:21
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 23
Updated 8 Oct 2026, 22:51 UTC. Ordered by latest scan.
@guandata/guanvis@0.1.41
The automatic lifecycle path combines foreign agent configuration writes with deliberate bypass of an existing agent safety hook. That bypass satisfies the blocking exception despite the...
@guandata/guanvis@0.1.49
The inspected chain establishes automatic postinstall mutation of foreign AI-assistant control surfaces, meeting the blocking policy. Package-related skill content and skip guards do not...
dsh-harmonyos@0.12.1
The inspected postinstall chain performs unconsented mutation of a foreign AI-agent control surface, meeting the supplied blocking policy. Compatibility intent and conditional file existe...
@bluewin/utils@1.0.0
The inspected source establishes an automatic external installation beacon unrelated to utility functionality. This constitutes install hook abuse, although the source does not demonstrat...
