npm detections from LPM Firewall.

The lifecycle script performs a global foreign AI-agent installation and persistent shell mutation without requiring an explicit user setup command. This meets the install-control-surface...

The package contains a concrete default runtime data-export path to an external webhook, including arbitrary log payload and context fields. The absence of an install hook limits the trig...

A hard-coded external endpoint receives account credentials through an automatic recovery path. The absence of an install hook does not mitigate this concrete runtime credential-exfiltrat...

The automatic lifecycle hook mutates consumer AI-agent control surfaces and project metadata without an explicit user setup action. This meets the install-hook abuse blocking policy even...

Automatic install-time deletion, compilation, and attempted privileged system software installation create a concrete unsafe install-hook attack surface. The behavior warrants blocking ev...

The remote-origin allowlist, token disclosure, and shell sink form a complete command-execution chain. The absence of an install hook does not remove the runtime backdoor.

The automatic postinstall hook mutates global Claude and Codex configuration and registers a lifecycle command outside the consumer project. This is concrete unconsented install-time AI-a...

A default external endpoint receives account credentials through automatic recovery paths. This is concrete credential exfiltration behavior, not ordinary authentication to Facebook.

The reachable encrypted decrypt-and-require chain is a concrete hidden code-execution mechanism. Absence of an install hook does not remove the runtime execution risk.

The package uses an automatic npm lifecycle hook to alter several unrelated AI-agent instruction surfaces without a user command or consent. This meets the install-time AI-agent control-s...

The automatic lifecycle script installs a foreign AI-agent CLI and persistently changes user shell and application state. This concrete install-time control-surface mutation meets the blo...

This is active runtime prompt-based control hijacking, not inert documentation. Although there is no npm install hook, the package injects steering into an agent's system prompt when its...

The postinstall hook automatically mutates ~/.claude/skills and installs a remote executable. This meets the policy for malicious install-hook abuse of a foreign AI-agent control surface.

The automatic postinstall hook silently mutates foreign AI-agent control surfaces, meeting the install-hook abuse blocking policy. The unrestricted MCP request path adds a concrete condit...

The automatic lifecycle hook performs broad, forced mutation of the consuming project's Cursor and commit-control configuration. This meets the install-control-surface blocking policy des...

This is concrete unconsented postinstall mutation of foreign AI-agent control surfaces. The absence of observed credential theft does not neutralize the install-hook abuse.

This is an unconsented postinstall mutation of global AI-agent control surfaces. The automatic registration is concrete and sufficient for blocking under the launcher isolation policy.

This is a concrete automatic postinstall chain that writes foreign global AI-agent settings and prompts. It meets the install-control-surface blocking policy.

This is a concrete, unconsented postinstall mutation of broad third-party AI-agent control surfaces. The automatic hook and global configuration writes meet the install-control-surface bl...

This is concrete install-time mutation of a foreign AI-agent control surface combined with persistent user-environment and launcher changes. The behavior meets the blocking install-hook p...

This is a concrete, reachable arbitrary binary execution chain, not merely ordinary tunnel networking. The absence of an npm install hook does not mitigate the runtime remote-code-executi...