npm security reports, with evidence.

This is concrete unconsented data exfiltration through a hidden default remote transport, with an explicit environment-value harvesting path. The lack of install hooks does not mitigate t...

The concealed default remote sink and automatic upload of user application logs form a concrete, undisclosed exfiltration path. Lack of install hooks does not mitigate this runtime behavior.

The concealed default remote logging target and raw environment-value logging create a concrete unconsented data-exfiltration path. The absence of install hooks does not mitigate runtime...

The concealed default remote destination and automatic transmission of user log data form a concrete data-exfiltration path. No lifecycle hook is needed because the behavior activates dur...

The package's import-time side effect is unrelated to its advertised assertion API and silently installs and executes another package with remote configuration. This is a concrete malicio...

This is concrete, unconsented import-time execution that globally installs and runs an unrelated package with an external endpoint. Absence of an npm lifecycle hook does not mitigate the...

Direct source inspection confirms automatic collection and Telegram upload of the importing process's working directory. This is a concrete credential/data-exfiltration chain, not a benig...

The package performs an undisclosed, automatic action on the user's authenticated WhatsApp account, concealed in an obfuscated policy module. Its install hook is not the attack vector, bu...

This is not a lifecycle-only concern: executable runtime code injects broad file-harvesting instructions into a permission-bypassing AI agent. The lack of install hooks does not mitigate...

The import-time executable is concrete, unrelated to the package purpose, and contains explicit malware capabilities. No install hook is needed for impact because ordinary application imp...

Despite its stated research purpose, the package automatically exfiltrates identifying build-environment data during installation through two network channels. This is concrete unconsente...

This is concrete, unconsented install-time host-data exfiltration disguised as a placeholder package. It warrants blocking.

The package has no apparent functionality beyond an unconsented install-time hostname beacon to an unrelated hard-coded endpoint. This is concrete data exfiltration behavior.

This is a concrete unconsented install-time network beacon that exports host identity to an unrelated hard-coded endpoint. It has no stated package functionality beyond the placeholder RE...

The automatic postinstall mutates a foreign Claude-related AI-agent surface and deletes files from ~/.claude; this meets the block boundary. The unchecked executable download adds further...

Source confirms a deliberate GitLens license-bypass and foreign extension overwrite capability. This is concrete malicious behavior despite not being activated by postinstall.

Concrete postinstall code mutates global Claude and Codex skill roots and installs instructions that accept injected work. This meets the firewall block threshold regardless of the absenc...

The package performs a concrete, destructive system-wide executable replacement during postinstall. Its transparency reduces deception risk but does not remove the harmful install-time at...

The package contains concrete, automatic, unconsented mutation of outgoing user media metadata. Although the lifecycle hook is benign and no host credential theft was found, the hidden at...

This is concrete broad credential collection and remote transmission to a package-controlled cloud endpoint, not merely a required cloud feature limited to the project. The install hook a...

The lifecycle chain concretely performs broad agent-control and hook persistence in the consuming project. Although no exfiltration was found, this meets the blocking policy for unconsent...