npm security reports, with evidence.

This package performs unconsented postinstall mutation of a foreign, user-wide Claude Code control surface. That concrete persistence and hook registration meets the blocking policy even...

The package contains a concrete import-time denial-of-service path aimed at CI and sandbox environments, plus concealed dynamic loading. These behaviors are not required for the documente...

The package performs unconsented post-install mutation of foreign, user-level AI-agent configuration and extension directories. This meets the firewall block boundary despite the changes...

This is a concrete, non-essential account mutation that promotes the package owner's channel by default. The harmless version check and optional native loader do not mitigate that behavior.

The automatic postinstall registration changes an external AI-agent/browser integration without an explicit user action. This is a concrete unconsented lifecycle control-surface mutation,...

OpenSSF/OSV malware advisory MAL-2026-15564 blocks this version. package.json declares a preinstall hook that runs `node resources.js`, which fires automatically on `npm install`. resourc...

Source inspection confirms an automatic postinstall mutation of several foreign AI-agent configuration surfaces. This meets the blocking policy even though the installer avoids overwritin...

The package performs unconsented postinstall mutation of broad, user-level Claude AI-agent control surfaces. Its MCP registration also uses a floating latest package reference.

This is a concrete install-time persistence and C2 malware chain, not a package-aligned administrative tool. The source implements remote shell execution, surveillance, exfiltration, and...

A bundled session credential is concrete credential exposure, supported by source that collects and persists browser cookies to the same file. The lifecycle hooks add unrequested user-env...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...