npm security reports, with evidence.

This package performs unconsented postinstall mutation of OpenCode and consumer-project dependency control files, then reinforces it at runtime with automatic global skill installation an...

The package has a concrete automatic postinstall path that mutates broad third-party AI-agent control surfaces and performs substantial host bootstrap actions. This meets the install-hook...

This is concrete, unconsented postinstall mutation of broad AI-agent control surfaces combined with persistence. It meets the install-hook-abuse blocking policy regardless of the package'...

The automatic postinstall hook broadly mutates global Claude and Codex skill directories and removes selected command links. This meets the install-time foreign AI-agent control-surface a...

The package performs unconsented postinstall mutation of a foreign AI-agent control surface and broad deletion in that control surface. Those actions create a concrete harmful install-tim...

The package has no npm lifecycle trigger, but its setup path establishes broad persistent AI-agent hooks that exfiltrate agent data and accept remotely supplied replacement code. The comb...

The package has a concrete automatic postinstall path that mutates a foreign project and AI-agent plugin configuration, including a detached persistence-style reconciliation process. No s...

The package has a concrete automatic install-time chain that modifies global AI-agent instructions and configuration, rather than requiring an explicit user setup action. The injected con...

This is a deceptive, obfuscated browser redirector rather than a legitimate npm library. It has no install hook, but the delivered runtime behavior is concrete malicious traffic routing.

The global postinstall hook mutates a foreign, broad AI-agent control surface and executes a remote installer without consent. Its guards limit exposure but do not remove the concrete ins...

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces combined with persistent background execution. The package's stated purpose does not remove the instal...

The automatic external transmission of full request URLs and errors is a concrete data-exfiltration behavior. The absence of install hooks limits scope but does not neutralize this runtim...

The automatic postinstall performs unconsented mutation of the Claude Code plugin control surface and starts persistent services. This is concrete lifecycle abuse, irrespective of the ben...

The package has a concrete automatic install path that broadly modifies consumer AI-agent configuration and explicitly suppresses review of its generated files. This meets the install-hoo...

The automatic lifecycle hook modifies broad third-party AI-agent control surfaces and enables a package-controlled Codex plugin and MCP server. This meets the install-hook abuse blocking...

The embedded default telemetry destination can receive rich application records without a consumer-provided endpoint. This is concrete runtime data exfiltration, and the remote script loa...

The lifecycle hook performs unconsented collection and attempted network transmission of sensitive installation-host data. This is concrete install-time credential and system-information...

The install hook performs concealed, automatic host-data exfiltration. The UI source does not mitigate this independent lifecycle attack.

The package contains a lifecycle-triggered collection-and-transmission command with no legitimate package functionality supporting it. This is concrete malicious install-hook behavior.

The package's sole substantive behavior is an automatic lifecycle hook that harvests environment and network data and sends it over the network. This is concrete credential and system-inf...

This is a lifecycle bootstrapper for a remote unsigned native payload that deliberately bypasses operating-system download protections and persists it in user launch surfaces. The behavio...