npm security reports, with evidence.

This is an automatic lifecycle-delivered native payload chain that deliberately evades platform download protections and persists through per-user desktop integration. The local hash chec...

The automatic postinstall hook modifies several foreign AI-agent control surfaces and installs activating instructions into each. This is concrete unconsented install-time agent-control m...

The package uses postinstall to mutate a foreign global agent plugin and configuration surface, then installs a plugin that starts detached background execution. This meets the install-ho...

The package performs automatic postinstall registration of an external Chrome MCP bridge and permission changes. That is a concrete unconsented AI-agent control-surface mutation.

This is an unconsented postinstall mutation of foreign AI-agent control surfaces, including destructive replacement of existing targets. The lifecycle hook is sufficient for a publish blo...

The package contains a concrete automatic postinstall chain that globally installs another AI-agent package. This meets the install-control-surface blocking policy despite no confirmed da...

OpenSSF/OSV malware advisory MAL-2026-15611 blocks this version. Published as part of a ClickFix-style fake-CAPTCHA phishing campaign documented by OX Security (see reference). The packag...

OpenSSF/OSV malware advisory MAL-2026-15604 blocks this version. Published as part of a ClickFix-style fake-CAPTCHA phishing campaign documented by OX Security (see reference). The packag...

OpenSSF/OSV malware advisory MAL-2026-15618 blocks this version. Published as part of a ClickFix-style fake-CAPTCHA phishing campaign documented by OX Security (see reference). The packag...

OpenSSF/OSV malware advisory MAL-2026-15619 blocks this version. Published as part of a ClickFix-style fake-CAPTCHA phishing campaign documented by OX Security (see reference). The packag...

OpenSSF/OSV malware advisory MAL-2026-15619 blocks this version. Published as part of a ClickFix-style fake-CAPTCHA phishing campaign documented by OX Security (see reference). The packag...

OpenSSF/OSV malware advisory MAL-2026-15604 blocks this version. Published as part of a ClickFix-style fake-CAPTCHA phishing campaign documented by OX Security (see reference). The packag...

OpenSSF/OSV malware advisory MAL-2026-15608 blocks this version. Published as part of a ClickFix-style fake-CAPTCHA phishing campaign documented by OX Security (see reference). The packag...

OpenSSF/OSV malware advisory MAL-2026-15614 blocks this version. Published as part of a ClickFix-style fake-CAPTCHA phishing campaign documented by OX Security (see reference). The packag...

OpenSSF/OSV malware advisory MAL-2026-15616 blocks this version. Published as part of a ClickFix-style fake-CAPTCHA phishing campaign documented by OX Security (see reference). The packag...

OpenSSF/OSV malware advisory MAL-2026-15615 blocks this version. Published as part of a ClickFix-style fake-CAPTCHA phishing campaign documented by OX Security (see reference). The packag...

OpenSSF/OSV malware advisory MAL-2026-15620 blocks this version. Published as part of a ClickFix-style fake-CAPTCHA phishing campaign documented by OX Security (see reference). The packag...

This package combines an automatic lifecycle hook, broad consumer-project agent configuration writes, deliberate package-manager policy changes, and reviewer-directed secret-disclosure in...

The automatic global postinstall hook overwrites cross-vendor AI-agent skill directories. This is concrete install-hook abuse even though no secret theft was confirmed.

This is an unconsented install-time mutation of a broad AI-agent control surface. Integrity checks on the downloaded application do not remove the configuration-hijack behavior.