npm security reports, with evidence.

This is concrete, automatic mutation of a foreign AI-agent configuration area and replaces existing content. The lack of network or credential theft does not neutralize the install-time c...

The source establishes an automatic postinstall chain that globally installs a separate AI coding agent. This meets the blocking policy for unconsented lifecycle mutation of a foreign or...

This is unconsented postinstall mutation of a broad AI-agent control surface, including automatic MCP registration and remote thin-client setup. The global-install guard does not make the...

The package performs an unconsented postinstall mutation of a foreign global AI-agent control surface. This meets the install-hook abuse blocking boundary even without evidence of secret...

Although npm installation itself has no lifecycle hook, the package's user-invoked setup establishes broad persistence, exports sensitive AI-session data, and permits remote replacement o...

The automatic postinstall hook both installs a remotely downloaded executable and can globally install agent skills without an explicit setup command. That concrete lifecycle control-surf...

Direct inspection confirms an automatic postinstall hook that writes a consumer project's AGENTS.md and agent-skill directory, as well as other project files. This meets the install-contr...

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces combined with background persistence. The lack of confirmed remote exfiltration does not remove the co...

The install hook silently writes a persistent workflow into a foreign project and causes future third-party reporting. This concrete install-time mutation is malicious behavior.

The source implements repeated, default-enabled posting of rich runtime records to embedded third-party webhook URLs. This is concrete data exfiltration despite the absence of an install...

The package has a lifecycle-reachable postinstall hook that modifies broad, foreign AI-agent control surfaces without a user-invoked setup action. This meets the install-time AI-agent con...

Although npm installation has no lifecycle hook, the package establishes broad AI-client hooks and remotely replaces the code they execute. This is a concrete remote-code execution and pe...

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The lifecycle behavior is sufficient for blocking even though the installer itself does not contac...

The opaque curl-to-Bash execution is unrelated to calculating worktime and provides a remote party direct code execution. Its explicit-command trigger reduces exposure but does not remove...

The opaque remote-code execution is hidden behind an unrelated worktime command and gives the short-link destination arbitrary code execution. No install hook is needed for this concrete...

This is unconsented install-time mutation of a foreign AI-agent control surface, with remote shell execution and subsequent automatic agent-message injection. The global-install guard red...

Source inspection confirms automatic install-time system mutation and runtime forwarding of private WhatsApp data to a fixed external recipient. The token gate does not provide consent fr...

The package performs an automatic postinstall global installation of an AI agent CLI and later defaults that agent layer to reduced approval safeguards. This meets the install-hook abuse...

The package performs an automatic postinstall global skill installation into broad AI-agent locations through a downloaded npx tool. This meets the install-hook abuse policy for unconsent...

The package automatically mutates Claude Code's user-level skills directory through an obfuscated postinstall payload. This meets the install-hook policy for an unconsented foreign AI-age...

The package contains an active remote code loader that evaluates unverified server content. Although it has no npm lifecycle hook, this is concrete arbitrary code execution when the bundl...