npm security reports, with evidence.

The package performs unconsented postinstall mutation of broad, foreign AI-agent skill directories. This meets the firewall block rule even though no credential theft was found.

The automatic postinstall mutation of broad, foreign AI-agent skill directories is a concrete unconsented control-surface change. No credential theft was found, but the lifecycle behavior...

The package contains an automatic secret-migration path that sends environment-derived secrets to a hard-coded external endpoint. No install hook is present, but the runtime credential ex...

The lifecycle hook automatically modifies broad foreign AI-agent skill roots, satisfying the package firewall rule for an unconsented postinstall control-surface mutation. No credential e...

The package performs the policy-defined blocking behavior: an npm postinstall modifies multiple foreign AI-agent skill roots by default. The lack of credential theft does not remove the c...

The postinstall hook makes unconsented, default changes to broad AI-agent skill locations. This meets the firewall block criterion even though direct credential harvesting was not found.

Source inspection confirms an automatic postinstall path that mutates ~/.agents, ~/.claude, and ~/.codex by linking package-provided skills. This meets the firewall policy for an unconsen...

Source establishes concrete stealth, persistence, proctoring-evasion, screen/UI capture, and automated AI-assisted cheating behavior. The benign postinstall hook does not mitigate the mal...

The package contains a concrete install-time chain that mutates both project-level agent state and user-wide Codex plugin state. That exceeds a package-local setup action and meets the bl...

The package's npm postinstall mutates broad, foreign AI-agent control surfaces and configures later hook execution. This meets the install-control-surface block criterion despite the abse...

The package performs install-time delivery and registration of an unsigned native payload while explicitly evading platform security checks. The bundled checksum does not address the inte...

OpenSSF/OSV malware advisory MAL-2026-14537 blocks this version. The package declares a preinstall lifecycle script (`node index.js`) that runs automatically on `npm install`. index.js co...

OpenSSF/OSV malware advisory MAL-2026-14536 blocks this version. package.json declares a preinstall hook that runs `node index.js` on every `npm install`. index.js collects installer host...

OpenSSF/OSV malware advisory MAL-2026-14539 blocks this version. The npm package ships an obfuscated payload appended to templates/backend/.eslintrc.js, after a legitimate-looking ESLint...

OpenSSF/OSV malware advisory MAL-2026-14539 blocks this version. The npm package ships an obfuscated payload appended to templates/backend/.eslintrc.js, after a legitimate-looking ESLint...

OpenSSF/OSV malware advisory MAL-2026-3030 blocks this version. Package ships poc.js which requires child_process and spawns /bin/sh, connecting its stdin/stdout to a TCP socket at 0.tcp....

OpenSSF/OSV malware advisory MAL-2026-14535 blocks this version. The package's main entry (dist/index.mjs) locates dist/internal/math.mjs, chmods it to 0755, and spawns it as a detached c...

This package contains a concrete, enabled-by-default outbound logging path to hard-coded external receivers that includes user-supplied scan data. The absence of install hooks does not re...

The package performs unverified remote code execution during postinstall to install a separate Hermes AI agent. This is a concrete unconsented lifecycle mutation of a foreign AI-agent con...

Direct source inspection confirms unconsented postinstall mutation of both Claude and Codex global skill directories, including replacement of existing targets. The installed instructions...