npm security reports, with evidence.

Concrete install-time mutation of both Claude Code and Codex global MCP configuration meets the block policy for unconsented foreign/broad AI-agent control-surface writes.

The source confirms a concrete npm postinstall chain that writes and merges package-controlled content into broad external AI-agent control surfaces. This meets the blocking policy regard...

Direct manifest inspection confirms an install-time command that mutates the consuming project by installing a separate package. No benign package-aligned setup purpose is shown.

The lifecycle hook performs an unconsented install-time mutation outside the package directory. The missing declared entrypoint does not mitigate that concrete behavior.

Direct source inspection confirms an install-time mutation of the consuming project's manifest to add an unrelated dependency. This is concrete malicious supply-chain behavior.

The source establishes a concrete, default credential-exfiltration path to a third-party endpoint during ordinary package use. No install hook is needed for this runtime behavior to be ma...

The source contains an unconditional import-time remote-code loader. This is concrete malicious behavior, irrespective of the lack of lifecycle hooks.

The package contains a concrete postinstall dependency-injection chain against the installer project's package.json. No benign package function or user-invoked setup path justifies this m...

OpenSSF/OSV malware advisory MAL-2026-14304 blocks this version. base99-85x is a typosquat of the base-x encoding library. Its main export's decode() function POSTs every caller-supplied...

OpenSSF/OSV malware advisory MAL-2026-14303 blocks this version. Package x6842179305 ships a main entry (1.js) that invokes the `Function` constructor over a custom-encoded, keyed/XOR-dec...

OpenSSF/OSV malware advisory MAL-2026-14303 blocks this version. Package x6842179305 ships a main entry (1.js) that invokes the `Function` constructor over a custom-encoded, keyed/XOR-dec...

The install-time hook deliberately mutates the invoking project by adding an unrelated package. This is concrete unconsented staged-package installation behavior.

The install hook performs an undeclared, project-root package installation, a concrete staged-payload mechanism. No benign package functionality or source explains this behavior.

OpenSSF/OSV malware advisory MAL-2026-14302 blocks this version. ai-texts-utils@1.0.3 declares a single runtime dependency, 'ai-texts', shipped as a bundledDependency inside the tarball....

This is concrete, unconsented install-time remote code execution, not merely a user-invoked downloader. Platform and global-install guards reduce reach but do not remove the attack surface.

The manifest contains a concrete install-time supply-chain action outside its own package directory, with no package functionality to justify it. This is malicious installation behavior r...

The explicit preinstall hook performs an unconsented secondary package installation. This is concrete install-hook abuse even though the package itself contains no direct exfiltration or...

The manifest contains a concrete, unconsented install-time second-stage package installation outside its own directory. This is a dependency-injection payload chain, not a package-aligned...

This is a concrete install-time remote payload chain designed to evade platform download-security controls, not a benign library dependency. The bundled checksum does not mitigate the pac...

The import-time payload is intentionally concealed and combines networking with execSync/spawn and filesystem access. No lifecycle hook is needed because ordinary package import activates...

The package contains a concrete, remote-controlled and unconsented action against users' WhatsApp accounts during ordinary runtime. Its install hook is benign, but does not mitigate the r...