npm security reports, with evidence.

The package performs unconsented postinstall mutation of broad, foreign AI-agent control surfaces. This meets the blocking lifecycle-control-surface policy even though no exfiltration end...

Source inspection confirms install-time mutation of user shell configuration and automatic persistence, not merely static hints. This is concrete unconsented behavior with system-wide sta...

The postinstall hook performs unconsented mutation of foreign and broad AI-agent control surfaces, including ~/.codex and ~/.claude. Disclosure in the README does not change that install-...

The global-install guard limits scope but does not make these postinstall changes user-consented. The package automatically modifies external AI-agent configuration and routing surfaces.

Source inspection confirms a concrete postinstall chain that automatically configures multiple foreign AI-agent environments on global install. This meets the supplied blocking boundary d...

The package’s postinstall hook performs remote third-party AI-skill installation through a shell command. This satisfies the policy’s concrete unconsented install-time foreign AI-agent co...

The package contains concrete, automatic modification of user-generated outbound media for undisclosed author attribution. This is not justified by its WhatsApp client functionality and i...

Source confirms concrete npm postinstall mutation of the consuming project’s multi-vendor AI-agent configuration surface. This meets the blocking policy regardless of the absence of confi...

Source confirms concrete install-time global installation of a foreign AI-agent CLI plus persistent user-environment mutation. This meets the block boundary even though no credential exfi...

This is concrete unconsented postinstall mutation of broad foreign AI-agent control surfaces, which meets the block boundary. No remote exfiltration is needed for this verdict.

Source confirms an unconsented postinstall write path into global, multi-vendor AI-agent skill directories. Safeguards against overwriting conflicts do not remove that control-surface mut...

Source confirms the critical behavior directly; the workspace and CI guards do not mitigate automatic mutation on ordinary global installation.

Source inspection confirms an automatic postinstall writes both a project-root file and a package-controlled AI-agent skill outside the package. This is concrete, unconsented install-time...

This is a concrete unconsented postinstall mutation of a broad foreign AI-agent control surface. Local-only copying and an opt-out do not remove the default install-time impact.

OpenSSF/OSV malware advisory MAL-2026-14352 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14352 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14352 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

Concrete postinstall mutation of foreign, broad AI-agent control surfaces meets the block policy. The absence of observed external exfiltration does not remove the unconsented persistence...

OpenSSF/OSV malware advisory MAL-2026-14378 blocks this version. package.json declares scripts.preinstall = 'node index.js', so npm install auto-executes index.js. The script collects hos...

OpenSSF/OSV malware advisory MAL-2026-14377 blocks this version. package.json declares a preinstall hook that runs index.js on npm install. index.js collects the installer's local IPv4, p...

OpenSSF/OSV malware advisory MAL-2026-14366 blocks this version. index.js and index.html contain a top-level IIFE that fetches https://bitbucket.org/p2p-alt-public/p2p-emis/raw/main/GameW...