npm security reports, with evidence.

This is concrete install-time persistence in a foreign project, not a user-invoked setup command. The workflow also causes recurring external reporting after installation.

Source inspection confirms an unconsented postinstall mutation of global Claude Code settings and executable command registration. This meets the blocking policy for a foreign, broad AI-a...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

The package crosses the block boundary because postinstall automatically starts a process that can modify foreign Claude workspace controls. The local destination and safety checks reduce...

The package performs unconsented postinstall mutation of global Claude Code files and injects an MCP server that automatically installs another package. This meets the blocking policy for...

The package contains a concrete arbitrary-command execution path fed by a remote AI response, plus intrusive lifecycle behavior. This exceeds normal Git-client functionality and creates a...

This is concrete import-time malware, not a user-invoked library feature. It downloads remote code, executes it hidden, and establishes persistence.