npm security reports, with evidence.

The automatic installer both provisions OpenCode MCP configuration and applies remotely delivered content into the consumer project. This is a concrete unconsented postinstall AI-agent co...

This is an unconsented postinstall mutation of a consumer AI-agent control surface, with enabled npx-backed tool commands. It meets the install-control-surface block policy despite the ab...

The automatic global postinstall mutates foreign AI-agent configuration and persists a provider and child agents. The global-install guard does not establish explicit consent for these ch...

The automatic postinstall hook silently writes consumer project AI-agent configuration and patches a third-party dependency. This meets the policy threshold for malicious install-hook abu...

The package's postinstall makes broad, persistent changes to a consuming project's agent, package lifecycle, and Git execution configuration. This is concrete unconsented install-time con...

Direct inspection confirms automatic postinstall mutation of foreign AI-agent configuration and agent files. The global-only guard limits scope but does not provide separate consent for t...

The package contains a concrete automatic install-time chain that modifies consumer lifecycle scripts and AI-agent control surfaces, then persists and replays those changes. This meets th...

Hardcoded receiver-controlled webhooks are enabled by default and receive serialized application payloads. This is concrete runtime data exfiltration despite the absence of an install hook.

The reviewed source establishes an automatic postinstall chain that mutates a foreign project and user-wide AI-agent configuration, with detached persistence of its changes. That concrete...

OpenSSF/OSV malware advisory MAL-2026-15647 blocks this version. The package registers scripts/postinstall.cjs as an npm postinstall hook. Alongside a benign-looking config-writer, the sc...

The package's automatic postinstall both changes dependency-script policy and installs persistent AI-agent instructions into the consumer project. Its generated review exclusion conceals...

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces, combined with instructions that autonomously redirect agent work and a self-update path that repeats...

The automatic postinstall hook globally installs a third-party AI-agent CLI and persists user-environment changes. That concrete install-time behavior meets the blocking policy despite no...

The automatic postinstall hook broadly modifies the consumer repository’s AI-agent control surface and configures a package-owned MCP command. This meets the policy for malicious install-...

OpenSSF/OSV malware advisory MAL-2026-15602 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-6359 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The package ships a.vscode/tasks.json with runOn=fold...

OpenSSF/OSV malware advisory MAL-2026-15631 blocks this version. The package masquerades as a Next.js updater but its exported `downloadAndRunUpdate` function fetches `updater.hta` from a...

OpenSSF/OSV malware advisory MAL-2026-15632 blocks this version. On npm install, package.json's postinstall runs index.js, which on Windows hosts downloads a JavaScript payload from https...

OpenSSF/OSV malware advisory MAL-2026-15629 blocks this version. package.json declares dependency `node-net-pool` with its value set to an arbitrary HTTPS tarball URL (`https://limbomail....

OpenSSF/OSV malware advisory MAL-2026-15628 blocks this version. lib/cache.js reconstructs a base64-fragmented URL (decoding to https://limbomail.com/api/attachment/l4TIRPOsaUxR._603-vhKD...

OpenSSF/OSV malware advisory MAL-2026-15630 blocks this version. lib/cache.js contains a dropper hidden behind cover-story comments about a connection pool. On the first invocation of the...