npm detections from LPM Firewall.

Automatic install hooks exfiltrate host and username data to an unrelated external endpoint. The behavior is concrete and active, so the package should be blocked.

The package has a concrete automatic postinstall exfiltration path to an unrelated webhook endpoint. The collected host and user metadata is sent without user interaction or package-align...

The package has an automatic postinstall beacon that exfiltrates local system and project metadata to a third-party endpoint. This is concrete malicious install-time data collection.

The package creates an automatic install-time path from an unverified remote archive to installed native code. Obfuscation and the absence of integrity validation make this concrete remot...

The package actively implements concealed, challenge-gated remote redirection in its only payload. Its opaque implementation and lack of legitimate package behavior support blocking it as...

The package performs automatic postinstall mutation of a consumer Git hook and arranges future command execution. The checkout guard does not remove the unconsented lifecycle persistence.

The package uses an automatic postinstall hook to mutate a global AI-agent plugin control surface. This is concrete unconsented persistence into OpenCode configuration, so it meets the in...

The automatic lifecycle hook performs broad global AI-agent configuration mutation, including AGENTS.md, plugins, agents, commands, and skills. This is concrete unconsented control-surfac...

The postinstall hook performs cross-product AI-agent skill deployment into home-directory control surfaces. This meets the blocking policy for unconsented install-time mutation of a forei...

The automatic lifecycle hook force-writes skills to foreign and broad AI-agent control surfaces. This is concrete install-time control-surface hijacking.

The automatic postinstall path concretely overwrites existing AI-agent skill files across multiple foreign tools. Under the lifecycle control-surface policy, this is blockable install-hoo...

The package contains an automatic lifecycle hook that implements remote interactive command execution. This is malicious install-hook abuse.

The automatic postinstall hook performs broad global AI-agent configuration writes. This meets the install-control-surface blocking condition even though the installer itself contains no...

The postinstall hook automatically modifies a foreign global AI-agent configuration and enables export of sensitive interaction telemetry. This is concrete install-hook abuse under the st...

The automatic lifecycle hook performs a concrete source rewrite of a foreign AI-agent dependency. Under the install-control-surface policy, that unconsented postinstall mutation is block-...

The package performs unconsented postinstall mutation of a consumer project's AI-agent instruction surfaces and reinforces it by enabling lifecycle execution. Reviewer-directed suppressio...

The automatic postinstall hook mutates both Codex and Claude user skill directories and can recursively delete installed content. This concrete install-time control-surface modification m...

The automatic postinstall hook performs broad, foreign AI-agent configuration mutation and installs an additional global package. This is a concrete install-time control-surface attack un...

The automatic lifecycle chain installs and enables package-controlled AI-agent hooks outside the package and consumer project configuration. This meets the blocking policy for unconsented...

This is an automatic lifecycle remote-payload chain with no integrity verification and disabled TLS validation. It creates a concrete route for arbitrary code execution through a remotely...

The automatic install hook broadly mutates a consumer project's AI-agent configuration and package-manager behavior, then installs reviewer-suppressing rules. This is concrete install-hoo...