npm security reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-13934 blocks this version. The preinstall lifecycle script in preinstall.js issues an HTTPS request whose hostname is constructed as os.hostname() pr...

OpenSSF/OSV malware advisory MAL-2026-13934 blocks this version. The preinstall lifecycle script in preinstall.js issues an HTTPS request whose hostname is constructed as os.hostname() pr...

OpenSSF/OSV malware advisory MAL-2026-13934 blocks this version. The preinstall lifecycle script in preinstall.js issues an HTTPS request whose hostname is constructed as os.hostname() pr...

Direct source inspection confirms an install-time metadata collection and external exfiltration chain. The package has no other source files establishing a legitimate package function.

The package deliberately hides an auto-running browser loader that remotely retrieves and evaluates code. Its lack of an install hook reduces install-time scope but does not remove the co...

The sole package behavior is an install-time cloud-metadata collection and external transmission chain, with no package functionality to justify it.

The package contains a concrete automatic credential-upload path to a fixed external backend. The absence of an npm lifecycle hook does not remove the runtime exfiltration behavior.

The source implements an obfuscated remote-code loader with automatic browser activation. Absence of lifecycle hooks limits install-time impact but does not remove the concrete runtime RC...

The only package file defines an automatic install-time identity-exfiltration command. This is concrete unauthorized data exfiltration.

The sole package file defines a postinstall collector/exfiltrator with no package functionality or user-invoked justification. The concrete install-time transmission warrants blocking.

Direct manifest inspection confirms an automatic postinstall hook that harvests the installer username and exfiltrates it. This is concrete malicious install-time behavior.

The sole package behavior is an automatic install hook that harvests ECS metadata and transmits it to an unrelated external endpoint. This is a concrete exfiltration chain, not a package-...

The package has concrete install-time project and AI-agent control-surface writes, not merely dormant CLI functionality. This meets the block boundary for unconsented postinstall mutation...

The package performs unconsented postinstall writes to the consumer project and GitHub Copilot instruction surface. Although no install-time exfiltration was found, this meets the blockin...

The only package source defines an automatic install-time collection and exfiltration chain targeting ECS metadata and host identity.

The only package file defines an install-time metadata-harvesting and external-exfiltration chain. This is concrete malicious behavior, not a package-aligned operation.

The sole package behavior is an install-time collection-and-exfiltration pipeline targeting ECS metadata and an unrelated external host.

The package performs a concrete, automatic postinstall write chain into the consuming project's AI-agent configuration rather than requiring an explicit user command. This meets the block...

Direct source inspection confirms an install-time cloud-metadata exfiltration chain to an external endpoint.

The sole package behavior is an unconsented postinstall metadata fetch followed by external transmission. This is a concrete credential/data-exfiltration chain, not a benign package feature.