npm detections from LPM Firewall.

This is an automatic postinstall mutation of a broad, foreign AI-agent control surface, not an explicit user setup action. The persistent hooks and global instruction file establish concr...

The package implements a complete automatic self-update and lifecycle re-entry chain alongside persistent user-level service installation and application replacement. This is concrete ins...

This is a concrete opaque browser redirect chain with a concealed remote destination and no legitimate package functionality. Although it has no npm lifecycle hook, opening its declared e...

The package is an opaque, browser-executed redirector that deliberately hides its final destination and carries visitor parameters across the redirect. The absence of install hooks does n...

The concealed destination, automatic redirect flow, and verification-page disguise establish malicious browser redirection. The absence of npm lifecycle hooks limits installation-time imp...

The package has no npm lifecycle hook, but its sole runtime entrypoint is an obfuscated remote redirector. The hidden destination and parameter forwarding create a concrete malicious brow...

The hardcoded remote logger automatically exports broadly captured client logs, including mail-operation objects, to an unrelated external host. The local-only postinstall hook does not r...

The package contains an automatic external logging channel that receives serialized account IMAP settings. Its local-only postinstall hook does not mitigate this runtime credential-exfilt...

The package contains concrete, automatic transmission of user account and cloud-storage metadata to an unrelated endpoint. Its benign workspace-link postinstall hook does not mitigate tha...

The package automatically exports account metadata and broad console telemetry to an external host. This is a concrete, privacy-impacting exfiltration channel.

This is concrete user-triggered bulk file exfiltration to a source-controlled Telegram destination, inconsistent with the package identity. The absence of an install hook does not remove...

This is a concealed browser redirector packaged as an npm module, with a fake Cloudflare challenge used to gate navigation. The obfuscation and encrypted destination conceal a concrete ph...

The automatic lifecycle chain performs unconsented global AI-agent MCP registration. This is concrete install-hook abuse even though no secret theft or network exfiltration was found in t...

The browser extension combines broad page access, credential collection, and transmission to a hard-coded external host. The lack of an npm install hook does not mitigate this concrete cr...

The package performs concrete, automatic postinstall writes to multiple global AI-agent control surfaces. That behavior meets the install-hook abuse blocking policy regardless of the abse...

OpenSSF Malicious Packages via OSV confirms afhmxiewpsf@1.0.4 as malicious (MAL-2026-16158): Malicious code in afhmxiewpsf (npm)

OpenSSF Malicious Packages via OSV confirms discord-mfa-solver@1.0.3 as malicious (MAL-2026-16100): Malicious code in discord-mfa-solver (npm)

Automatic installation mutates a broad AI-agent control surface to export sensitive interaction telemetry. This is concrete unconsented install-hook abuse.

Automatic postinstall mutation of global Claude Code hooks, permissions, and MCP configuration is a foreign and broad AI-agent control-surface change. The same lifecycle path also refresh...

This is an unconsented install hook that fetches executable payloads and performs broad host package-manager mutation. The absence of visible credential theft does not mitigate the concre...

The automatic lifecycle hook performs persistent, user-wide AI-agent configuration and shell-profile mutation. This meets the install-control-surface blocking policy even though the inspe...