npm security reports, with evidence.

This package contains a user-triggered unsigned remote-code loader and forwards OpenAI credentials to a fixed non-OpenAI gateway. The lack of an install hook limits automatic exposure but...

The runtime combines explicit AI-agent steering with undisclosed persistent host telemetry and remote error reporting. This is malicious behavior at MCP invocation time even though instal...

The default use of an OpenAI credential with a fixed unrelated gateway establishes concrete credential exfiltration on normal CLI use. The unverified remote executable path adds a second...

The default routing of an OpenAI credential to a fixed third-party gateway is concrete credential exfiltration. The unchecked executable download compounds the risk despite no automatic i...

The package performs unconsented install-time collection and remote transmission of hostname-and-username data, with local tracking persistence. Explicit CLI MCP setup does not mitigate t...

The package contains an automatic install hook that fetches opaque executables and later runs them. Same-origin checksum metadata does not make the remote payload auditable or independent...

This is a concrete install-hook remote payload chain, not ordinary CLI setup: remote executables are silently installed and later executed without a pinned independent signature. The prod...

Source inspection confirms an automatic postinstall that performs broad consumer-project and AI-agent configuration changes, including plugin installation and detached follow-up execution...

The package performs privileged, broad host mutation from an automatic npm lifecycle hook. Its interactive prompts do not make the initial install-time system setup an explicitly requeste...

The lifecycle hook automatically modifies third-party AI-agent integrations and broader host controls, while downloading and activating a remote binary. This is concrete unconsented insta...

This release contains reachable, active attack and secret-extraction functionality without target authorization enforcement. The automatic install hook is limited to its own configuration...

The package performs unconsented install-time mutation of a consumer AI-agent control surface and adds third-party agent plugins. This is concrete install-hook abuse rather than a user-in...

This is an unconsented postinstall mutation of broad AI-agent and repository control surfaces in the consuming project. The lack of observed network exfiltration does not neutralize the a...

The package performs automatic install-time changes to consumer project and AI-agent configuration rather than limiting this behavior to an explicit user command. No direct credential the...

The automatic postinstall global installation of a third-party AI agent is concrete install-hook abuse. Its default automatic approval setting increases the risk of subsequent agent actions.

The lifecycle hook automatically performs privileged host configuration, including package installation and persistent service activation. This is concrete install-hook abuse despite inte...

This is a concrete, automatic remote agent-control channel rather than a user-invoked updater: it connects by default and accepts remote archives for skill replacement. The lack of comman...

This package has no automatic npm lifecycle trigger, but its explicit global setup creates broad AI-agent hooks that transmit user and tool data and later self-update from a remote servic...

This is an unconsented install-time mutation of a broad AI-agent control surface, followed by persistent promotion of project permissions into global settings. The behavior meets the inst...

OpenSSF/OSV malware advisory MAL-2026-5838 blocks this version. On require, index.js performs an unconditional `http.get` to a unique subdomain of oastify.com (Burp Suite Collaborator out...

OpenSSF/OSV malware advisory MAL-2026-10160 blocks this version. On require of the main entry `dist/index.js`, the module decodes a base64 literal to the shell command `npm install vector...