npm detections from LPM Firewall.

The package uses an automatic postinstall hook to install external system software, including privileged package-manager commands. That concrete install-hook behavior exceeds ordinary dep...

This is a concrete unconsented postinstall mutation of broad, foreign AI-agent control surfaces. It meets the install-control-surface blocking policy even though no secret exfiltration wa...

The automatic lifecycle hook mutates downstream package-manager configuration and installs package-controlled AI-agent instructions and skills into the consumer project. This meets the po...

The package implements an automatically activated remote command channel that can install arbitrary remotely supplied skill archives into agent directories. This is a concrete AI-agent co...

The automatic lifecycle hook persistently changes two external AI-agent configurations to launch package code. This meets the blocking policy for unconsented postinstall control-surface m...

The automatic lifecycle path reaches broad persistent AI-agent and Git configuration changes in the consumer repository. This meets the install-control-surface blocking policy.

The package contains a concrete automatic install-time remote native-code delivery path with certificate verification disabled and no integrity verification. This is unsafe executable pay...

The package has a concrete automatic lifecycle chain that silently changes foreign AI-agent configuration and tool controls. This meets the install-control-surface blocking policy.

The reachable CLI sends API credentials to an unrelated default endpoint, which is concrete credential exfiltration behavior. The absence of an install hook does not remove the runtime ex...

This is an unconsented postinstall mutation of a foreign consumer project's application and build control surface, with persistence through a package-injected plugin. The behavior meets t...

The command entrypoint contains explicit, elevated security-control tampering followed by remote binary execution. This is concrete malware behavior even though it is triggered by CLI use...

The package installs a default external log receiver and transmits serialized application records to it. This is concrete data exfiltration behavior, despite the absence of an install lif...

The automatic postinstall chain mutates another vendor's Codex executable paths with opaque native binaries. This meets the install-control-surface blocking boundary despite its backup an...

The automatic postinstall hook persists a wildcard command into the consumer's Claude configuration. This meets the install-time AI-agent control-surface abuse blocking policy.

The package has a concrete, automatic postinstall chain that installs a foreign agent CLI and modifies persistent shell configuration. That exceeds package-local setup and meets the insta...

The complete automatic lifecycle path downloads remote content and writes it into broad AI-agent directories, while also deleting local agent-related state. This is concrete install-hook...

The fetch-to-new-Function chain is concrete and reachable through an unvalidated message event. Although there is no install hook, the runtime behavior warrants blocking.

The automatic postinstall deploys an opaque bundled binary and injects it into Pi's shared MCP configuration. This meets the policy threshold for unconsented install-time mutation of a fo...

The automatic postinstall chain persistently modifies ~/.claude and registers package commands as Claude Code hooks without an install-time consent gate. This meets the install-control-su...

This is a concrete postinstall control-surface mutation chain, not merely an explicit setup command. The automatic writes to Claude Code settings and package-controlled skill meet the ins...

The package performs automatic remote code execution during postinstall and uses the resulting opaque binary to modify Claude Code hooks and settings. This is a concrete install-hook abus...