npm security reports, with evidence.

The unconsented postinstall overwrite of root AGENTS.md is a foreign, broad AI-agent control-surface mutation. Remote code updates in the rewritten build path reinforce the supply-chain r...

Source inspection confirms an automatically activated, obfuscated browser cryptominer rather than a package-aligned utility. The absence of a consumer install hook does not mitigate runti...

The lifecycle hook is benign, but runtime source establishes concealed, automatic modification of outbound user media with package-controlled newsletter metadata. This is concrete decepti...

The behavior is concrete, install-time, unconsented mutation of broad foreign AI-agent control surfaces and permissions. No external exfiltration was needed to establish the blocking cond...

The package performs the prohibited chain directly: npm postinstall silently mutates multiple AI-agent configurations and installs intercepting hooks. The absence of exfiltration does not...

OpenSSF/OSV malware advisory MAL-2026-13687 blocks this version. On module load, tokocrytodev instantiates a StealthC2 agent and starts a polling loop that fetches commands from https://b...

The lifecycle chain is concrete and automatic: postinstall invokes initialization that persists registrations, approval changes, and enforcement hooks across unrelated AI-agent configurat...

OpenSSF/OSV malware advisory MAL-2026-14067 blocks this version. upload-to-gcp@3.2.1 runs a postinstall lifecycle script on npm install that collects host identifiers (os.hostname(), proc...

OpenSSF/OSV malware advisory MAL-2026-14065 blocks this version. Package published under a name impersonating Akamai's sensor_data anti-bot SDK. index.js contains a /*... */ comment whose...

OpenSSF/OSV malware advisory MAL-2026-14066 blocks this version. The package advertises itself as an Akamai Bot Manager sensor generator, but its main entry conceals its real behavior. in...

OpenSSF/OSV malware advisory MAL-2026-12337 blocks this version. The package presents itself as an Akamai sensor generator but ships two coupled malicious mechanisms. index.js contains a...

The automatic postinstall mutation of ~/.agents, ~/.claude, and ~/.codex meets the block policy for an unconsented broad AI-agent control-surface write. No additional exfiltration is need...

OpenSSF/OSV malware advisory MAL-2026-12331 blocks this version. The package advertises itself as a tiny ID generator but its main entry dist/index.cjs contains an obfuscator.io + RC4 str...

This is concrete runtime data exfiltration through automatic clipboard collection and remote POSTs, supplemented by screenshot upload capability. The absence of lifecycle hooks does not r...

The lifecycle script performs concrete, automatic writes to Claude and Codex hook configuration, rather than merely offering an explicit setup command. That meets the blocking policy for...

The package performs unconsented install-time remote payload execution and writes remotely acquired agent skills. This is a concrete supply-chain execution surface, not merely a user-invo...

The package performs concrete, automatic postinstall mutation of broad foreign AI-agent control surfaces on global installation. That behavior meets the stated publish-block boundary.

Direct source inspection confirms an install-triggered write to Claude Code's global settings that registers broad command hooks. This meets the policy's concrete AI-agent control-hijack...

OpenSSF/OSV malware advisory MAL-2026-14052 blocks this version. The package's preinstall.js reads a hex-encoded command string from preinstall.json, decodes it with Buffer.from(hex, 'hex...

OpenSSF/OSV malware advisory MAL-2026-14063 blocks this version. On npm install, preinstall/postinstall scripts execute `id`, read environment variables including AWS_LAMBDA_LOG_STREAM_NA...

OpenSSF/OSV malware advisory MAL-2026-14063 blocks this version. On npm install, preinstall/postinstall scripts execute `id`, read environment variables including AWS_LAMBDA_LOG_STREAM_NA...