npm security reports, with evidence.

The install chain concretely rewrites Claude Code configuration from postinstall. That foreign AI-agent hook installation is sufficient for a block verdict under the stated policy.

The lifecycle chain is source-confirmed and mutates ~/.claude/settings.json to execute the package on multiple Claude events. This meets the firewall block policy for unconsented postinst...

The package performs a concrete unconsented postinstall deletion of existing AI credentials/settings selected by competitor markers, followed by automatic replacement credential provision...

This is concrete, unconsented install-time collection and external exfiltration of sensitive host data. The package contains no legitimate implementation that would justify this behavior.

The package has a concrete remote upload path for broadly collected credentials and project data. Explicit command activation and documentation reduce stealth but do not mitigate the unsa...

The concrete postinstall path deletes existing agent credentials/settings and installs new remote-provisioned credentials without consent. The launcher and dormant hooks do not mitigate t...

This is concrete, default-enabled data exfiltration to a hardcoded third-party endpoint after installation. It is not justified by an npm lifecycle hook, but user invocation does not cure...

OpenSSF/OSV malware advisory MAL-2026-14051 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The package presents itself as a discord.js clone (`...

OpenSSF/OSV malware advisory MAL-2026-14051 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The package presents itself as a discord.js clone (`...

OpenSSF/OSV malware advisory MAL-2026-14051 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The package presents itself as a discord.js clone (`...

OpenSSF/OSV malware advisory MAL-2026-14051 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The package presents itself as a discord.js clone (`...

OpenSSF/OSV malware advisory MAL-2026-14051 blocks this version. The package presents itself as a discord.js clone (`repository` field points at the real `github.com/discordjs/discord.js....

The package's install-time behavior is not limited to its own state: it modifies user-level Claude hooks and establishes persistence without an explicit follow-up command. This meets the...

Source inspection confirms reachable, targeted disruptive behavior in the distributed browser bundle. The lack of an install hook does not mitigate import-time protestware.

Static source inspection confirms a targeted, delayed browser-disruption payload with a fixed remote media endpoint. No install hook is needed because the malicious code executes when the...

This is concrete install-time spyware and remote-control behavior, not an inert bundled application. The hard-coded endpoint, screen exfiltration, and remote UI automation establish a mal...

OpenSSF/OSV malware advisory MAL-2026-14048 blocks this version. The package is published under a name mimicking lodash but its manifest's main entry is dist/xelis-miner.browser.js, a Xel...

OpenSSF/OSV malware advisory MAL-2026-14048 blocks this version. The package is published under a name mimicking lodash but its manifest's main entry is dist/xelis-miner.browser.js, a Xel...

OpenSSF/OSV malware advisory MAL-2026-14050 blocks this version. package.json for @polymarkets/clob-client-v2 declares its inquirer dependency as an HTTPS tarball URL on registrynpmjs.to,...

OpenSSF/OSV malware advisory MAL-2026-14049 blocks this version. Package published to the public npm registry under the @mexc scope without evidence of scope ownership. package.json decla...

OpenSSF/OSV malware advisory MAL-2026-14048 blocks this version. The package is published under a name mimicking lodash but its manifest's main entry is dist/xelis-miner.browser.js, a Xel...