npm detections from LPM Firewall.

The package performs unconsented install-time transmission of an environment credential to a remote service. Its normal icon exports do not justify this credential-harvesting lifecycle be...

This is an unconsented postinstall mutation of a broad, foreign AI-agent control surface with future command execution. No exfiltration was found, but the automatic persistent hook meets...

This is concrete, automatic postinstall mutation of multiple foreign AI-agent control surfaces. The absence of exfiltration does not neutralize the unconsented control-surface writes.

This package creates an unconsented install-time remote binary delivery and persistence path with no independent integrity verification. The absence of secret harvesting does not mitigate...

The automatic postinstall modifies both package-manager behavior and foreign AI-agent instruction surfaces. The included reviewer-directed secret-suppression rule reinforces malicious int...

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces, with deletion capability. The lifecycle payload is executable agent instruction content rather tha...

The package has a concrete automatic lifecycle path that overwrites a third-party AI-agent adapter. Version and source checks constrain the patch but do not restore user consent for the m...

The package performs automatic postinstall mutation of consumer package-manager and AI-agent control files, then supplies reviewer-suppression and unsafe secret-handling instructions. Thi...

The automatic postinstall chain performs broad, foreign AI-agent skill installation without an explicit user setup command. This meets the install-hook abuse blocking policy even though t...

The package performs unconsented collection of local AI-agent account identity material and automatic third-party telemetry transmission. Hashing does not remove the stable cross-session...

The package's postinstall hook silently writes a Gemini skill into the user's home configuration and embeds instructions that authorize an agent to execute the package. This meets the ins...

The package performs broad consumer-project AI-agent configuration changes automatically during npm installation and suppresses review of those changes. This meets the install-control-sur...

The automatic lifecycle path executes opaque native code to modify foreign AI-agent controls, and the binary contains an explicit safety-bypass command. This meets the install-hook abuse...

The automatic postinstall writes and merges global AI-agent control surfaces rather than limiting setup to an explicit user command or package-owned project directory. That concrete lifec...

The package contains runtime AI-agent steering language and transmits host-derived identity data during ordinary tool calls. The lack of lifecycle hooks reduces install risk but does not...

The automatic lifecycle hook performs unconsented mutation of both Codex and Claude user skill directories, with recursive deletion, and changes the Python user environment. This meets th...

This is an unconsented postinstall mutation of a broad AI-agent control surface, which the policy classifies as malicious install-hook abuse. The absence of a remote payload does not remo...

This is an unconsented install-time remote-payload chain that automatically invokes opaque AI-tool onboarding. The optional integrity check and process termination increase the risk.

This is an automatic lifecycle delivery chain for opaque native code from an unverified remote source, with TLS verification explicitly disabled. It creates a concrete install-time arbitr...

This is concrete unconsented postinstall mutation of a consumer project's broad AI-agent control surface, compounded by lifecycle-enabling .npmrc changes and review suppression. The lack...

This is an unconsented postinstall mutation of broad foreign AI-agent control surfaces, with destructive synchronization and an installed agent-execution instruction set. It meets the ins...