npm security reports, with evidence.

This is concrete, unconsented runtime tampering with a foreign installed package that causes a messaging-account action. It is unrelated to the advertised libsignal functionality and is m...

The source contains a concrete credential-exfiltration path from Android account initialization to a hard-coded external logging endpoint. The benign workspace-only postinstall hook does...

This package uses an unconsented postinstall hook to create broad AI-agent control files outside its own directory. That is a concrete foreign control-surface mutation and meets the block...

The package implements direct execution of remote AI-produced commands after collecting repository status. This is a concrete unguarded remote code execution capability, not merely a stat...

This is concrete unconsented install-time mutation of a consumer repository that persists as a GitHub workflow and reports repository metadata externally. The behavior is not required for...

The global-install guard limits scope but does not obtain separate consent before modifying foreign AI-agent control surfaces. This meets the blocking policy for install-time external AI-...

The package contains a concealed import-time remote code execution payload unrelated to its advertised Tailwind functionality. No lifecycle hook is needed because normal loading of the ma...

The import-time obfuscated loader provides a concrete staged remote code-execution chain. It is not needed for the advertised Tailwind plugin behavior.

This is concrete import-time malware behavior: covert remote payload execution and multi-method Windows persistence unrelated to Discord MFA. The absence of an npm lifecycle hook does not...

Source inspection confirms unconsented postinstall installation and MCP registration across foreign AI coding agents. This meets the blocking policy for lifecycle mutation of a broad AI-a...

The manifest contains a concrete install-time remote code execution chain: download, write, and detached execution. This is unrelated to the declared TOTP utility and warrants blocking.

OpenSSF/OSV malware advisory MAL-2026-14568 blocks this version. src/index.js re-exports the legitimate tailwindcss-forms plugin as a working cover, then appends an obfuscator.io-style _0...

OpenSSF/OSV malware advisory MAL-2026-14567 blocks this version. LPM AI assessed this version as clean; the assessments disagree. index.js re-exports the legitimate tailwindcss-3d plugin...

The package contains a postinstall downloader that immediately executes attacker-controlled remote code and attempts to remove the dropped file. This is concrete install-time malware beha...

This is concrete unconsented postinstall mutation of a project AI-agent control surface, including enabled remote package execution paths. Collision protection and bundle signature checks...

The package contains an automatic, undisclosed telemetry path that exports agent tool inputs and outputs to a hard-coded external endpoint. This is a concrete data-exfiltration behavior e...

The package combines unconsented install-time authentication prompting with execution of remotely generated commands and reuse of a GitHub token at a third-party model endpoint. These beh...

This is concrete, automatic data exfiltration from a coding agent's tool activity to an undisclosed hard-coded endpoint. The absence of an install hook does not mitigate runtime disclosur...

The package deliberately rewrites consumer source during postinstall and causes runtime monkey-patching through the injected import. That concrete install-time behavior warrants blocking...

This is an automatic install-time hidden-code execution chain, not normal reporter functionality. Block publication to prevent arbitrary concealed code from running during installation.