npm security reports, with evidence.

The hidden, remotely controlled account mutation is concrete malicious runtime behavior. The install hook itself is benign, but it does not mitigate the runtime attack.

A narrow guard does not make unconsented install-time reconnaissance acceptable in the environment it targets. The lifecycle-triggered collection and external callback establish concrete...

This is concrete install-time mutation of broad, foreign AI-agent control surfaces. It meets the blocking policy despite no observed credential exfiltration or remote payload download.

OpenSSF/OSV malware advisory MAL-2026-14042 blocks this version. package.json declares `inquirer` with a tarball URL pointing at registrynpmjs.to — a domain that typosquats the official n...

OpenSSF/OSV malware advisory MAL-2026-14043 blocks this version. index.js exports a listen(clientId) function that subscribes to https://ntfy.sh/dv-141u30-admin-cmd-<clientId>/sse via Eve...

The concrete postinstall rewrite of a foreign AI-agent dependency is sufficient for blocking under the install-control-surface policy. The observed gateway credential use does not indepen...

A hardcoded non-package endpoint receives automatically collected work and Claude-session data by default. The absence of an npm lifecycle hook does not remove the concrete post-install e...

OpenSSF/OSV malware advisory MAL-2026-14041 blocks this version. Package.json describes the package as 'Static assets distribution', but the shipped HTML/JS is an iOS-version-gated payloa...

This is concrete, unconsented postinstall mutation of foreign/broad AI-agent control surfaces. The lack of an install-time exfiltration request does not remove the control-hijack risk cre...

This is concrete, automatic install-time credential and host-data exfiltration to an unrelated fixed endpoint. The behavior is not required by the package’s placeholder runtime library.

The package performs unconsented postinstall mutation of a foreign AI-agent control surface for rebranding. Runtime authentication behavior does not mitigate that install-time tampering.

The package has a concrete, default postinstall remote-payload execution chain and stages unpinned externally fetched skills for activation. Opt-in protection for shared-path migration do...

This is concrete install-time mutation of a foreign AI-agent control surface, coupled with routing users to the package vendor's provider. The authentication network traffic is package-al...

OpenSSF/OSV malware advisory MAL-2026-14039 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package presents itself as a CDN static-asset distri...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...