Loading npm security reports…
Skip to main contentSoft block: AI-agent control surfaceyesterday 08:43Soft block: AI-agent control surfaceyesterday 08:36Soft block: AI-agent control surfaceyesterday 08:36Soft block: AI-agent control surfaceyesterday 08:32
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 6
Updated 8 Oct 2026, 10:42 UTC. Ordered by latest scan.
@inboost-pro/inboost-proxy@0.3.1
The postinstall hook performs unconsented writes to multiple AI-agent configuration surfaces in both the project and user home. Under the install control-surface policy, this warrants blo...
inboost-proxy@0.3.1
The package performs unconsented postinstall writes to broad AI-agent configuration locations, establishing an active control-surface mutation attack surface. The source supports blocking...
@inboost-pro/inboost-ai-proxy@0.3.1
The manifest's postinstall hook reaches code that automatically writes to multiple AI-agent configuration locations without a consent prompt. This meets the block criterion for unconsente...
@rigxyz/cli@0.14.5
The package automatically mutates global AI-agent instruction directories during postinstall, creating an unconsented agent control surface. This matches the install-hook blocking policy...
