npm detections from LPM Firewall.

The package entrypoint contains a targeted, silent background launcher, and its bundled payload implements remote message polling plus executable file delivery. Lack of an install hook do...

Source inspection confirms a normal runtime path that transmits sensitive email-account configuration to an unrelated remote logging endpoint. This is concrete credential and data exfiltr...

The package contains a concrete, silent runtime exfiltration path for sensitive mail-account metadata to a non-provider endpoint. Local lifecycle and launcher behavior do not mitigate tha...

The package contains an import-time, detached network beacon with a conditional remote-code-execution path. This behavior is unrelated to Chai security assertions and is a concrete malici...

The source contains a concrete hidden arbitrary-code execution chain. Although normal package entrypoints use bundles without this loader and there is no install hook, the packaged source...

The package contains a concrete remote payload loader and evaluator reached through its public API. Absence of an install hook does not mitigate this runtime RCE behavior.

The package contains an unconditional import-time remote payload loader with dynamic code execution. Absence of npm lifecycle hooks does not mitigate runtime compromise of every consumer...

This is concrete, unconsented install-time host fingerprinting and external exfiltration with no apparent package functionality. The behavior warrants blocking publication.

Source inspection confirms a concrete remote-code-execution chain behind an exported API, not merely static similarity. Although it has no install hook, the stealthy detached remote paylo...

The source confirms a runtime path from normal package use to a detached helper that fetches and executes remote code; this is concrete malicious behavior even without install hooks. Scan...

Direct source inspection confirms unconsented install-time exfiltration and persistence unrelated to Polymarket/MCP behavior. This is concrete malicious behavior, not a noisy static label.

Source inspection confirms a concrete remote-code-execution chain in package-owned runtime code, not just scanner noise. The behavior is unrelated to legitimate PWA generation and should...

Source inspection confirms an exported, README-advertised path to remote JavaScript execution via a hidden helper process. Absence of install hooks reduces automatic install-time impact b...

Source inspection confirms concrete import-time malicious behavior: obfuscated code downloads and executes a remote binary while attempting Defender exclusion and stealth/elevation. This...

This is concrete malicious install-hook behavior: unconsented postinstall download and detached execution of remote unauthenticated code. The behavior is not package-aligned with a benign...

Direct source inspection confirms covert import-time remote payload execution that is not package-aligned. This is concrete malicious behavior even without an npm lifecycle hook.

Under the provided policy, unconsented npm postinstall mutation of a broad AI-agent control surface is blockable even when the behavior is package-aligned. The inspected source supports t...

The source confirms an unconsented postinstall write into a dependency-owned AI/OAuth sign-in callback surface, which matches the block policy even though the observed payload is cosmetic...

Source inspection confirms concrete runtime remote code execution unrelated to Tailwind animation functionality. The obfuscation, derived C2 URLs, eval, and detached child process executi...

Direct source inspection confirms import-time exfiltration in both package entrypoints to a non-package-aligned domain, including full environment variables. This is concrete malicious be...