npm security reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-14813 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14823 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14810 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14808 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

The manifest contains a concrete automatic install-time remote payload execution and cron persistence chain. The minimal runtime module does not justify this behavior.

Source inspection confirms an automatic install hook that fetches and executes a remote payload, then establishes cron persistence. This is concrete malicious install-hook abuse.

This package performs unconsented remote code execution during preinstall and persists it through cron. This is concrete malware behavior, not a logging feature.

Direct source inspection confirms an automatic install hook that executes an unverified remote script and creates cron persistence. The benign-looking runtime stub does not mitigate this...

This is concrete unconsented install-time remote code execution with persistence. The harmless runtime stub does not mitigate the lifecycle attack.

The package contains a concrete remote download-and-shell execution path plus silent privileged self-updating. Its install hooks are cosmetic, but runtime behavior is sufficient to block...

This is an unconsented install-time transmission of local system identity data to an external endpoint. The behavior is concrete and unrelated to the package's runtime code.

This is an unconsented postinstall mutation of a foreign AI-agent control surface, including enabled command definitions. Conflict protection does not remove the risk because a new worksp...

The package performs automatic install-time host identification and sends it to an external endpoint. This is concrete data exfiltration with no legitimate implementation in the package.

The package performs unconsented install-time host fingerprinting and external transmission. Its empty runtime code does not justify that behavior.

The package performs unconsented install-time host reconnaissance and exfiltrates it to a fixed external endpoint. Its only runtime file is empty, leaving no package function that justifi...

The automatic SVG import, deliberate obfuscation, and dynamic code execution are incompatible with a passive SVG package. Lack of install hooks reduces install-time risk but does not remo...

Source inspection confirms a concrete concealed capture-and-AI-solving payload with proctoring evasion and persistence. The benign postinstall hook does not reduce the risk of the explici...

Source inspection confirms a concrete stealth, persistence, capture, and AI-assisted cheating workflow. Its credential-handling code and bundled credential material compound the risk, so...

This is unconsented postinstall mutation of broad, foreign AI-agent control surfaces, including workspace trust. The lifecycle behavior is concrete and sufficient to block even though the...

The postinstall lifecycle performs broad global Claude and Codex control-surface writes and registers continued execution on Codex turn completion. This meets the policy threshold for mal...