npm security reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-14047 blocks this version. On invocation of `agent-proxy start`, the CLI opens an outbound WebSocket to an obfuscated author-controlled endpoint (hub...

OpenSSF/OSV malware advisory MAL-2026-14047 blocks this version. On invocation of `agent-proxy start`, the CLI opens an outbound WebSocket to an obfuscated author-controlled endpoint (hub...

OpenSSF/OSV malware advisory MAL-2026-14047 blocks this version. On invocation of `agent-proxy start`, the CLI opens an outbound WebSocket to an obfuscated author-controlled endpoint (hub...

This is concrete, unconsented install-time reconnaissance, exfiltration, persistence, and cross-project mutation. The path guard limits targeting but does not make the behavior benign.

The bundle contains concrete, targeted browser-disruption behavior and external audio loading unrelated to its checkout purpose. Absence of an install hook does not mitigate the import-ti...

This is concrete, unconsented install-time reconnaissance and exfiltration rather than a package-aligned function. The environment guard narrows targeting but does not remove the maliciou...

This is concrete unconsented install-time reconnaissance, exfiltration, persistence, and filesystem mutation. The path gate and stated research purpose do not remove the malicious behavio...

The cwd guard narrows targeting but does not make the lifecycle-triggered internal reconnaissance consensual. Collection is retained locally and TLS validation is disabled.

Source confirms a concrete install-time chain of data collection, webhook exfiltration, detached daemon persistence, and cross-build enumeration. The hard-coded environment guard and clai...

This is concrete install-time persistence, cross-tenant reconnaissance, remote exfiltration, and runtime-code modification. The research-oriented comments do not negate the implemented be...

OpenSSF/OSV malware advisory MAL-2026-14045 blocks this version. The npm package @ferudionz/webautomation exposes a single function connet(x) whose sole behavior is to POST the caller-sup...

OpenSSF/OSV malware advisory MAL-2026-14044 blocks this version. The package ships a single obfuscator.io-style `index.js` with a rotated string array, RC4 key-schedule + XOR string decod...

The package contains a concrete, automatic remote-controlled account-manipulation chain. Its benign Node-version preinstall check does not mitigate the runtime behavior.

This is concrete install-time persistence and data exfiltration, with conditional cross-build dependency mutation. The package's research framing and sandbox guard do not make these actio...

The hidden, remotely controlled account mutation is concrete malicious runtime behavior. The install hook itself is benign, but it does not mitigate the runtime attack.

A narrow guard does not make unconsented install-time reconnaissance acceptable in the environment it targets. The lifecycle-triggered collection and external callback establish concrete...

This is concrete install-time mutation of broad, foreign AI-agent control surfaces. It meets the blocking policy despite no observed credential exfiltration or remote payload download.

OpenSSF/OSV malware advisory MAL-2026-14042 blocks this version. package.json declares `inquirer` with a tarball URL pointing at registrynpmjs.to — a domain that typosquats the official n...

OpenSSF/OSV malware advisory MAL-2026-14043 blocks this version. index.js exports a listen(clientId) function that subscribes to https://ntfy.sh/dv-141u30-admin-cmd-<clientId>/sse via Eve...

The concrete postinstall rewrite of a foreign AI-agent dependency is sufficient for blocking under the install-control-surface policy. The observed gateway credential use does not indepen...

A hardcoded non-package endpoint receives automatically collected work and Claude-session data by default. The absence of an npm lifecycle hook does not remove the concrete post-install e...