npm security reports, with evidence.

Source inspection confirms an unconsented postinstall operation that installs third-party skills globally into ~/.agents/skills/. Opt-out and non-fatal handling do not make the mutation u...

Source inspection confirms an unconsented postinstall write to a foreign AI-agent skills directory through a remote npx command. This meets the install-control-surface block policy.

The harmless postinstall chmod does not mitigate the runtime unverified executable-fetch path. This creates a concrete remote-code-execution surface rather than a merely suspicious primit...

The payload is concrete, targeted, import-time disruptive behavior unrelated to a dynamic-column React component. Absence of install hooks does not remove the browser-runtime attack surface.

OpenSSF/OSV malware advisory MAL-2026-11769 blocks this version. npm/@ornikar/react-native-svg-transformer is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...

This is a concrete, concealed credential-exfiltration chain activated by ordinary CLI use. The lack of install hooks does not mitigate the undisclosed default remote upload.

OpenSSF/OSV malware advisory MAL-2026-13495 blocks this version. blekit is published as a React Native BLE SDK, but its main entry re-exports a logger module (`consoleApp`/`initializeLogg...

OpenSSF/OSV malware advisory MAL-2026-11757 blocks this version. npm/@ornikar/intl-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...

OpenSSF/OSV malware advisory MAL-2026-13495 blocks this version. blekit is published as a React Native BLE SDK, but its main entry re-exports a logger module (`consoleApp`/`initializeLogg...

OpenSSF/OSV malware advisory MAL-2026-13495 blocks this version. blekit is published as a React Native BLE SDK, but its main entry re-exports a logger module (`consoleApp`/`initializeLogg...

OpenSSF/OSV malware advisory MAL-2026-13495 blocks this version. blekit is published as a React Native BLE SDK, but its main entry re-exports a logger module (`consoleApp`/`initializeLogg...

OpenSSF/OSV malware advisory MAL-2026-13495 blocks this version. blekit is published as a React Native BLE SDK, but its main entry re-exports a logger module (`consoleApp`/`initializeLogg...

OpenSSF/OSV malware advisory MAL-2026-13495 blocks this version. blekit is published as a React Native BLE SDK, but its main entry re-exports a logger module (`consoleApp`/`initializeLogg...

OpenSSF/OSV malware advisory MAL-2026-13495 blocks this version. blekit is published as a React Native BLE SDK, but its main entry re-exports a logger module (`consoleApp`/`initializeLogg...

Source directly establishes concealed default credential exfiltration and remote subscription-use behavior. The lack of an install hook does not mitigate the malicious runtime payload.

This is concrete, unconsented credential exfiltration triggered by normal CLI use, not merely proxy functionality. Absence of an install hook does not mitigate the runtime theft behavior.

This is concrete, unconsented credential exfiltration activated by normal CLI use, not merely an explicit user-configured proxy feature. The absence of an npm lifecycle hook does not miti...

Source establishes credential exfiltration to a remote hub configured through the package's command surface. No install hook is involved, but the undisclosed backup behavior is concrete a...

OpenSSF/OSV malware advisory MAL-2026-13668 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

This is a concrete unconsented lifecycle-chain mutation of persistence and a foreign AI-agent launch surface, not merely dormant CLI capability.

The lifecycle installer stages a remote native payload while intentionally evading platform trust protections. Hash checking does not mitigate the package author's deliberate delivery and...