npm detections from LPM Firewall.

The preinstall hook contains a concrete, obfuscated remote fetch-and-eval chain. This is unconsented install-time remote code execution, not functionality required by a React UI package.

Direct source inspection confirms an install-time staged remote payload execution chain. The normal library entrypoints do not mitigate the malicious lifecycle behavior.

The concealed install-time fetch-and-eval chain is a concrete remote-code-execution mechanism, independent of the benign-looking library entrypoints. This warrants blocking publication.

The install-triggered native binary exposes concrete stealth, networking, process, and deletion capabilities inconsistent with the package’s stated functionality. This is sufficient evide...

Source inspection confirms an obfuscated, install-time remote payload execution chain. The normal library entrypoints do not mitigate the preinstall compromise.

Direct source inspection establishes automatic transmission of an IMAP configuration object that may contain the password to an unrelated hard-coded host. This is concrete credential exfi...

The package contains an import-time remote binary dropper targeting a foreign Windows Startup persistence surface. The benign calendar API does not justify this behavior.

Source inspection confirms concrete import-time remote payload delivery and Startup-folder persistence, inconsistent with the documented calendar utility. This is malicious behavior, not...

The package contains a concealed import-time remote payload delivery and persistence chain unrelated to calendar utilities. This is concrete malware behavior.

Source establishes a concrete runtime credential/configuration exfiltration path to an unrelated endpoint. No install hook is needed for this malicious behavior.

The package embeds a concealed remote-code loader with disabled TLS validation, despite presenting itself as a small SVG utility. No lifecycle hook is needed for the concrete user-trigger...

The package contains concrete, import-triggered command execution and exfiltration rather than a merely user-invoked administrative feature. Its stated research purpose does not remove th...

Source inspection confirms an unconsented postinstall mutation of multiple foreign AI-agent control surfaces, which meets the blocking policy. No network exfiltration is needed for this c...

Source establishes a concrete third-party credential-harvesting and exfiltration chain, activated by ordinary telemetry startup and insufficiently disclosed. This is malicious regardless...

Source inspection confirms a concrete unconsented postinstall persistence chain across foreign AI-agent configurations. No exfiltration was found, but the lifecycle control-surface mutati...

The concrete postinstall download-and-execute chain, including an automatic password-dialog helper, exceeds a benign installer pattern. Fixed URLs do not mitigate the lack of integrity ve...

A hidden preinstall download-and-eval chain is concrete malicious remote-code-execution behavior unrelated to a table library. The non-executable file mode may prevent activation in this...

This is a concrete install-time remote-code-execution chain concealed with Base64 and eval. The normal library entrypoints do not justify it.

This is a concrete, unconsented preinstall remote-code-execution chain, hidden by Base64 encoding. The package should be blocked.

The package performs automatic execution of a mutable remote binary at install time, with optional same-origin checksum validation. That is a concrete install-time remote payload executio...

This is concrete credential and secret collection with remote synchronization, not a package-aligned encryption primitive. Absence of lifecycle hooks limits activation to consumer runtime...