npm security reports, with evidence.

Direct source inspection confirms an automatic postinstall hook that writes a broad OpenCode agent control surface into the consuming project. This meets the install-hook abuse blocking p...

OpenSSF/OSV malware advisory MAL-2026-14769 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14775 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14763 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14771 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14774 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14777 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14762 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14766 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14782 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14768 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14767 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14781 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

The source confirms unconsented postinstall mutation of broad, foreign AI-agent configuration and hooks on global install. This meets the install-control-surface block policy despite no o...

This is concrete credential exfiltration to a package-selected third-party endpoint during normal runtime login. The absence of install hooks does not remove the risk to consumers who aut...

The package has a concrete credential-exfiltration path: a standard OpenAI key is forwarded to a fixed non-OpenAI default endpoint. Its automatic unchecked native-binary download increase...

This is unconsented postinstall mutation of a consumer AI-agent control surface, including enabled executable MCP definitions. The absence of direct exfiltration does not remove the concr...

The package contains a complete, obscured remote-download-and-execute chain activated by its primary API. The absence of an install hook does not mitigate this concrete runtime remote-cod...

The package automatically exfiltrates command logs and identifying data during normal CLI use, with additional exam surveillance. This is concrete data collection behavior, not merely a u...

Automatic postinstall injection into both global Codex and Claude skill directories is a concrete broad AI-agent control-surface mutation. The recursive pruning increases the persistence...

This package establishes an unconsented lifecycle-to-build chain that can overwrite generic AI-agent instructions from a remote server and self-update through npm. The behavior is a concr...