npm security reports, with evidence.

This is an import-time remote-code-execution chain unrelated to the advertised adapter functionality. The absence of an npm lifecycle hook does not mitigate the automatic execution on nor...

This is a concrete, automatically triggered remote payload execution chain unrelated to the package's stated minimal library API. Opt-out environment checks do not establish informed user...

This is a concrete, import-triggered remote payload execution chain unrelated to the package’s stated interface. The same staged native-profiler pattern also appears in lib/telemetry.js.

This is concrete, unconsented import-time remote payload execution unrelated to the advertised UI-avatar package. The scanner path for telemetry was noisy, but direct inspection confirms...

This is concrete import-time remote code execution, not legitimate telemetry: arbitrary downloaded bytes are executed without user action or verification.

The package's import-time bootstrap is a concrete remote-code-execution chain unrelated to its declared React button functionality. Lack of an npm lifecycle hook does not mitigate executi...

This is a concrete import-time staged-payload chain, not ordinary telemetry. The package's advertised chart API does not require or expose this behavior.

The import-time downloader and detached execution are concrete malicious behavior, not telemetry. The unused telemetry implementation contains the same native-payload pattern and reinforc...

The import-time downloader-to-execution chain is concrete and unconditional apart from opt-out/short-lived stamp checks. No lifecycle script is needed because the malicious code executes...

This is concrete import-time staged payload execution unrelated to the declared React-components package purpose. The unused telemetry module does not mitigate the directly reachable loader.

The source establishes automatic collection and upload of sensitive third-party agent data, not merely a user-requested upload feature. Absence of an install hook does not mitigate the ru...

The source establishes an import-time, obfuscated telemetry and execution payload unrelated to package functionality. No lifecycle hook is needed for the payload to run when consumers loa...

This is concrete automatic remote-code execution on ordinary package import, unrelated to the advertised feature-flag API. It warrants a publish block.

OpenSSF/OSV malware advisory MAL-2026-10707 blocks this version. The `@ai-support-agent/cli` package installs a long-running daemon (`ai-support-agent start`) that connects to a vendor AP...

OpenSSF/OSV malware advisory MAL-2026-10462 blocks this version. Package metadata and README advertise a 'Windows diagnostic utility' / 'high-performance DOM utility', but the actual code...

OpenSSF/OSV malware advisory MAL-2026-10462 blocks this version. Package metadata and README advertise a 'Windows diagnostic utility' / 'high-performance DOM utility', but the actual code...

OpenSSF/OSV malware advisory MAL-2026-13359 blocks this version. src/config.js hardcodes a remote host as the English-word phrase "Four Five P Nine Five P One Eight Six P Two Three Seven"...

OpenSSF/OSV malware advisory MAL-2026-12180 blocks this version. The package advertises itself as a geocoding CLI but, on every invocation of the tool, executes `env` via execFile to dump...

OpenSSF/OSV malware advisory MAL-2026-12180 blocks this version. The package advertises itself as a geocoding CLI but, on every invocation of the tool, executes `env` via execFile to dump...

OpenSSF/OSV malware advisory MAL-2026-13360 blocks this version. The package is published as a chalk/tinygradient color-gradient wrapper, and its ESM entrypoint dist/index.js matches that...

Direct source inspection confirms a concealed, import-time remote payload execution chain. The absence of lifecycle hooks does not mitigate runtime compromise when consumers import the pa...