npm detections from LPM Firewall.

Source inspection confirms unconsented install-time external beaconing from lifecycle scripts, which is concrete dependency-confusion behavior even if framed as authorized research. Lack...

Direct source inspection confirms import-time remote code execution from an external JSON endpoint using Function.constructor. This is concrete malicious behavior and not package-aligned...

Direct source inspection confirms install-triggered execution and concrete credential/file exfiltration. This is malicious behavior with no benign package purpose.

Source inspection confirms covert install/build-time execution via binding.gyp and external host fingerprint exfiltration. This is concrete malicious behavior, not package-aligned functio...

Direct source inspection confirms build-time execution and external exfiltration of local host identity data. The proof string explicitly indicates an ignore-scripts bypass, so this shoul...

Direct source inspection confirms install-time code execution through binding.gyp and an unconsented write into the consumer workspace. Even without network exfiltration, this is delibera...

Direct inspection confirms an obfuscated remote fetch plus eval in index.js:41 on the package's main runtime path. This is concrete malicious behavior, not a package-aligned cookie parsin...

Direct source inspection confirms install/build-time execution through binding.gyp and concrete host/CI metadata exfiltration to an external ngrok endpoint. The workspace file write and p...

Direct source inspection confirms unconsented build-time code execution, host/CI fingerprint exfiltration, and workspace mutation with no legitimate package behavior. This is concrete mal...

Read-only source inspection confirms a runtime remote fetch plus eval chain in the package's main code path, using an obscured endpoint unrelated to cookie parsing. Absence of install hoo...

Source inspection confirms a concrete runtime malicious chain: an obscured remote endpoint controls code passed to eval inside the package's primary exported function. Absence of install...

Source inspection confirms a hidden network fetch and eval in index.js, unrelated to cookie parsing and activated during normal runtime use. This is concrete malicious remote code executi...

Source inspection confirms a concrete runtime RCE chain: detached child_process spawn, external payload fetch, and dynamic execution. This behavior is not package-aligned and warrants blo...

Source inspection confirms concrete install-time execution that sends telemetry to a hardcoded Sentry DSN and queries public IP endpoints before the user imports the package. This is not...

Source inspection confirms concrete install-time writes into Claude Code control files, including persistent hooks that affect later agent behavior. Under the provided policy, unconsented...

Source inspection confirms the scanner’s key finding: a postinstall hook mutates broad/foreign AI-agent control surfaces in the consumer project. Under the install-control-surface policy,...

Source inspection confirms concrete import-time remote code execution from a third-party URL, with the fetched payload executed using Function.constructor and given require. This is malic...

Source inspection confirms a concrete malicious runtime chain: environment exfiltration to an obscured external endpoint followed by remote code execution. The absence of lifecycle hooks...

Source inspection confirms unconsented postinstall mutation of broad/foreign AI-agent control surfaces, which meets the block policy even though the shipped skill content is mostly packag...

Source inspection confirms a concrete policy-blocking behavior: install-time mutation of broad, foreign AI-agent control surfaces. The absence of network exfiltration or obfuscation lower...

Source inspection confirms a non-package-aligned hidden downloader/evaluator path from index.js to lib/caller.js. This is concrete malicious runtime remote code execution, not just a nois...