npm detections from LPM Firewall.

This is a concrete malware chain executed automatically on import, not a test fixture or package-aligned feature. The absence of npm lifecycle hooks does not mitigate import-time credenti...

This is a concrete delayed malware chain embedded in a purported Base58 utility: covert payload staging, persistence, wallet/credential harvesting, remote activation, and exfiltration.

This is a concrete, unconsented postinstall mutation of a consuming project's AI-agent control files. The behavior meets the blocking policy regardless of the absence of credential exfilt...

Concrete default-on remote transmission of local AI conversation content to a hard-coded plaintext endpoint is data exfiltration behavior. The install hook is package-scoped, but it does...

Direct source inspection confirms an unconsented install-time malicious chain: secret theft, exfiltration, cryptocurrency draining, and persistence. This is unrelated to the package’s cla...

This is concrete install-time configuration of an enabled full-content trace uploader to a hard-coded external endpoint, followed by automatic backend startup. The conditional user-ID gat...

The source confirms the scanner’s central finding: an automatic npm lifecycle hook modifies broad AI-agent skill roots. Transparency in the README and absence of exfiltration reduce ambig...

The package provides no library behavior; its import-time browser payload covertly embeds an externally controlled destination. The domain-rotation publishing helper reinforces intentiona...

This is a concrete import-time persistence and credential-exfiltration chain concealed behind ABI helpers. The lack of npm lifecycle hooks does not mitigate the malicious runtime behavior.

This is a concrete import-time malware chain with persistence and credential exfiltration; it is unrelated to the advertised Arbitrum utility functions. Lack of an npm lifecycle hook does...

Source inspection confirms an import-time persistence and credential-exfiltration chain concealed behind benign SDK functions. The lack of lifecycle hooks does not mitigate runtime execut...

This is a concrete import-time persistence and credential-exfiltration chain hidden behind unrelated Ethereum utilities. The absence of npm lifecycle hooks does not mitigate runtime impor...

This is concrete import-time malware, not a package-aligned utility feature. The encoded fixture is an active second stage for persistence and credential exfiltration.

The package contains an import-time, obfuscated detached child-process launcher in a validator module. This is concrete hidden execution, not a package-aligned generator feature.

Direct inspection confirms an automatic install-time chain that writes package-authored configuration into foreign AI-agent directories. This meets the firewall block boundary regardless...

The automatic postinstall agent-control-file writes are concrete and meet the install-time control-surface hijack boundary. Other network and shell capabilities are confined to explicitly...

This is a concrete import-time malware chain with stealthy persistence and credential exfiltration, unrelated to the advertised Solana utility functions.

This is concrete import-time malware behavior, not a package-aligned validation feature. The absence of npm lifecycle hooks does not mitigate the delayed runtime dropper and credential ex...

The obfuscated remote fetch and remote VM-evaluated parser are a concrete runtime payload-execution chain, not a benign dotenv feature. No install hook is needed for the package to execut...

This is a concrete unconsented install-time remote-code-execution chain, not a package-aligned dependency check. The benign exported helpers do not mitigate the malicious lifecycle behavior.