npm security reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-13418 blocks this version. The tarball ships a single 6.9 MB linux/x64 Go executable at bin/ccfly-setup and no source. The binary links github.com/cr...

OpenSSF/OSV malware advisory MAL-2026-13415 blocks this version. When invoked as its CLI (npx @aubea/mars), the package opens a WebSocket connection to a hardcoded third-party relay at ws...

OpenSSF/OSV malware advisory MAL-2026-13418 blocks this version. The tarball ships a single 6.9 MB linux/x64 Go executable at bin/ccfly-setup and no source. The binary links github.com/cr...

OpenSSF/OSV malware advisory MAL-2026-13418 blocks this version. The tarball ships a single 6.9 MB linux/x64 Go executable at bin/ccfly-setup and no source. The binary links github.com/cr...

OpenSSF/OSV malware advisory MAL-2026-13417 blocks this version. The package ships a 6.3 MB linux/arm64 Go binary at bin/ccfly-setup. The binary embeds github.com/creack/pty (PTY spawner)...

OpenSSF/OSV malware advisory MAL-2026-13418 blocks this version. The tarball ships a single 6.9 MB linux/x64 Go executable at bin/ccfly-setup and no source. The binary links github.com/cr...

OpenSSF/OSV malware advisory MAL-2026-13415 blocks this version. When invoked as its CLI (npx @aubea/mars), the package opens a WebSocket connection to a hardcoded third-party relay at ws...

OpenSSF/OSV malware advisory MAL-2026-13419 blocks this version. The package is published as a runtime for 'brt-built botruntime agents' and its client.d.ts describes the exported `client...

OpenSSF/OSV malware advisory MAL-2026-13415 blocks this version. When invoked as its CLI (npx @aubea/mars), the package opens a WebSocket connection to a hardcoded third-party relay at ws...

OpenSSF/OSV malware advisory MAL-2026-13410 blocks this version. The package runs a daemon that polls a hardcoded Supabase project (syhzpqqvrplaqdipcymw.supabase.co) via the RPC `runtime_...

OpenSSF/OSV malware advisory MAL-2026-13406 blocks this version. 9remote is a remote-shell tool: its CLI launches an HTTP/WebSocket server and provisions a Cloudflare Quick Tunnel that ex...

OpenSSF/OSV malware advisory MAL-2026-13409 blocks this version. After a one-time pairing flow, the daemon in dist/session-runner.js and dist/command-runner.js polls a hardcoded Supabase...

This is a concrete unconsented postinstall mutation of the broad Codex skill control surface. The absence of immediate exfiltration does not remove the persistence and agent-control risk.

The lifecycle behavior is concrete and directly mutates broad, third-party AI-agent configuration and prompt-extension locations without consent. Safety checks and lack of observed exfilt...

The package has no install hook, but ordinary runtime activation performs unconsented data transmission of locally produced command/output data. This is concrete data exfiltration, not me...

OpenSSF/OSV malware advisory MAL-2026-13370 blocks this version. On npm install, postinstall.js unconditionally runs runSetup() which wires the package into the installer's AI tooling and...

OpenSSF/OSV malware advisory MAL-2026-13383 blocks this version. LPM AI assessed this version as clean; the assessments disagree. svelte-mapped-metrics@1.0.0 shows no evidence of credenti...

OpenSSF/OSV malware advisory MAL-2026-10723 blocks this version. The package installs itself as a user-level service (systemd on Linux via service/linux.js, with launchd/PM2 siblings) and...

OpenSSF/OSV malware advisory MAL-2026-10723 blocks this version. The package installs itself as a user-level service (systemd on Linux via service/linux.js, with launchd/PM2 siblings) and...

OpenSSF/OSV malware advisory MAL-2026-10723 blocks this version. The package installs itself as a user-level service (systemd on Linux via service/linux.js, with launchd/PM2 siblings) and...