npm detections from LPM Firewall.

This is a concrete remote code execution path concealed behind an exported middleware and detached subprocess. The absence of an install hook does not mitigate runtime execution of server...

The automatic lifecycle chain downloads or executes an opaque native payload and installs AI-agent hooks without user action. The payload's embedded bypass command makes the resulting age...

The package automatically changes generic consumer AI-agent skill directories during npm installation and can populate them with remotely supplied content. Its safeguards do not establish...

The package performs an unconsented external runtime installation during postinstall, creating a supply-chain execution path outside npm's declared dependency set. The pinned version and...

This package performs unconsented install-time system mutation and automatically accesses foreign credential stores during normal startup. The behavior is concrete and high impact even th...

The package contains a concrete credential-collection and external-upload path with a hard-coded remote default. The lack of an install hook and the confirmation prompt reduce stealth but...

This is an automatic remote-native-code execution chain with no independent payload authentication. The installer also weakens macOS execution protections for that remote payload.

This is a concrete automatic postinstall mutation of a foreign AI-agent control surface. Guarded anchors reduce accidental breakage but do not provide user consent for the host rewrite.

This is a concrete automatic postinstall mutation of a foreign, global AI-agent control surface. The behavior meets the install-control-surface blocking rule regardless of the absence of...

This package performs unconsented install-time host mutation through privileged package-manager commands and repeats it at runtime. Its additional credential harvesting and network use ma...

This is an unconsented install-time mutation of a foreign AI-agent control surface. The automatic hook registration meets the blocking policy even though the payload binaries are not incl...

The bridge combines deliberate evasion with an unrestricted AI-agent launcher, and the distributed code is intentionally obscured. The absence of a consumer lifecycle hook limits installa...

The package contains a concrete automatic remote logging path to package-embedded webhook URLs and serializes potentially sensitive application records for it. This is data exfiltration b...

The package contains a concrete automatic postinstall chain that overwrites another product's UI files. This meets the install-control-surface blocking rule even though no credential thef...

The package has a concrete automatic install-time chain that alters two foreign global agent configurations and installs instructions controlling later agent actions. This meets the insta...

This package performs unconsented install-time remote code execution through a curl-to-shell bootstrap and a second opaque package installation. That supply-chain execution path is suffic...

The automatic postinstall chain mutates broad consumer AI-agent control surfaces and package-manager safeguards. Reviewer-directed suppression of secret reporting further establishes mali...

The lifecycle hook performs persistent, cross-agent configuration changes and enables a command-executing MCP plugin without an explicit user command. This meets the install-hook abuse bl...

The package deliberately seeds an unauthenticated workspace with a fixed private HTTP OAuth authority and automatically uses it later. Although it is not install-time behavior, this is a...

Source inspection confirms credential forwarding to a fixed third-party endpoint on a reachable runtime path. The absence of install hooks does not remove the credential-exfiltration risk.

The automatic postinstall hook rewrites a foreign AI runtime in the consumer dependency tree. This is a concrete install-hook abuse even though the inspected code does not exfiltrate data.