npm security reports, with evidence.

OpenSSF Malicious Packages via OSV confirms epic-webpack-config@0.2.0 as malicious (MAL-2025-49219): Malicious code in epic-webpack-config (npm)

OpenSSF Malicious Packages via OSV confirms epic-webpack-config@0.1.0 as malicious (MAL-2025-49219): Malicious code in epic-webpack-config (npm)

OpenSSF Malicious Packages via OSV confirms epic-webpack-config@0.0.0 as malicious (MAL-2025-49219): Malicious code in epic-webpack-config (npm)

OpenSSF Malicious Packages via OSV confirms epic-webpack-config@2100.4.2 as malicious (MAL-2025-49219): Malicious code in epic-webpack-config (npm)

OpenSSF Malicious Packages via OSV confirms epic-webpack-config@4.2.2 as malicious (MAL-2025-49219): Malicious code in epic-webpack-config (npm)

The inspected lifecycle chain performs unconsented global AI-agent instruction and permission mutation, meeting the supplied blocking policy. The local-install guard and backups do not re...

Source establishes unconsented postinstall mutation of a broad AI-agent instruction surface. This meets the supplied blocking policy even without evidence of credential theft or remote pa...

The source proves unconsented npm postinstall mutation of foreign, global AI-agent control surfaces, which meets the supplied blocking rule. This decision rests on the active installation...

The source establishes unconsented install-time mutation of broad AI-agent control surfaces, including deletion of unrelated global hooks. This meets the blocking policy independently of...

The inspected chain establishes unconsented postinstall mutation of a foreign, user-wide AI-agent control surface, which meets the supplied blocking policy. The visible statusline purpose...

Source proves unconsented postinstall mutation of a broad AI-agent control surface, enabling detailed telemetry by default. This meets the blocking policy independently of whether telemet...

Source proves unconsented postinstall mutation of a broad AI-agent control surface. The supplied policy requires blocking this behavior even though the bundled instructions appear ordinary.

The inspected lifecycle performs unconsented writes to Claude's global command surface, including unconditional replacement of existing commands. This meets the supplied blocking rule for...

The inspected lifecycle chain performs an unconsented install-time mutation of a foreign AI-agent control surface, meeting the blocking policy. The local destination and overwrite guard l...

Source proves unconsented postinstall mutation of a broad AI-agent control surface, which meets the blocking policy. The block rests on the global configuration change, without assuming t...

The inspected global postinstall path performs unconsented mutation of foreign AI-agent configuration and broad instruction files, meeting the blocking policy. The local-install guard and...

The inspected source establishes unconsented postinstall mutation of two foreign, global AI-agent control surfaces. This meets the supplied blocking policy even though the registered MCP...

Source establishes an automatic, unconsented postinstall mutation of a broad foreign AI-agent control surface. This meets the supplied blocking policy even though the writer preserves exi...

Source confirms unconsented postinstall mutation of a broad AI-agent control surface, which meets the blocking policy. The package-aligned destination does not excuse globally enabling co...

The inspected lifecycle chain performs unconsented writes to global Gemini instructions and Claude configuration, meeting the supplied blocking rule for foreign AI-agent control surfaces....