npm detections from LPM Firewall.

The package performs an automatic postinstall download or execution of opaque native code and immediately uses it to install Codex and Claude Code hooks. This is concrete install-hook abu...

This is concrete install-time agent-control mutation, not merely an optional CLI feature. The opaque native payload and remote binary download make the resulting hook behavior unreviewabl...

The package's install hook automatically executes an unpinned remote native payload and mutates an agent-related user configuration through that payload. This is concrete install-time rem...

This is an unconsented postinstall mutation of a broad AI-agent control surface. The lifecycle path is concrete and sufficient for blocking under the policy.

The package contains a default-enabled remote execution path that transmits a runtime session value and request data to a hard-coded external endpoint. This is concrete credential and dat...

Automatic installation-time transmission of an environment credential is concrete credential-exfiltration behavior. The package contains no evidence that the installer independently conse...

The package has an automatic preinstall hook that sends an environment credential to a remote host. This is concrete credential exfiltration during installation, despite the absence of ot...

The automatic preinstall hook exports an environment credential over the network. The absence of payload execution does not remove the concrete credential-exfiltration surface.

The automatic lifecycle hook collects and transmits a credential, creating concrete install-time credential-exfiltration behavior. No broader payload, persistence, or filesystem mutation...

This is concrete automatic credential transmission at install time, and the purported validation does not cause installation to fail for invalid responses. The behavior is therefore crede...

The package contains a concrete automatic install-time host-fingerprinting callback to a third-party endpoint. Its simple runtime export does not justify or mitigate that behavior.

Source inspection confirms direct, automatic collection of sensitive browser data and transmission to an unrelated fixed endpoint. The absence of an install hook does not mitigate the mal...

The automatic lifecycle mutation of a foreign AI CLI, unverified remote executable installation, and forced self-update form a concrete install-hook abuse chain. No exfiltration is requir...

The automatic global installation of a separate AI-agent CLI is a concrete foreign control-surface mutation. Persistent PATH and desktop changes increase the impact of that lifecycle hook.

The package performs automatic install-time transmission of an environment credential, while suppressing validation failure. That behavior is a concrete credential-exfiltration risk rathe...

The package uses an automatic preinstall hook to require and transmit an environment secret. The source provides no necessary local functionality for this collection, and it suppresses va...

The package automatically transmits an environment credential during preinstall. This is concrete install-time credential exfiltration, regardless of its claimed license-check purpose.

This icon package automatically exports an environment credential during installation, while its validation result is not enforced. That is concrete install-time credential exfiltration.

This package uses an automatic npm lifecycle hook to install and prune global skills for two separate AI-agent products. That concrete cross-agent control-surface mutation meets the insta...

This is an unconsented postinstall mutation path for external AI-agent control surfaces, implemented through an opaque native executable. The unchecked remote-binary fallback increases in...

The automatic postinstall hook persistently mutates both Codex and Claude skill locations and installs additional user-level dependencies. This meets the install-control-surface policy fo...