npm detections from LPM Firewall.

The complete remote-code execution path is present in the published source and activates on ordinary import. Detached execution and PID tracking add persistence behavior.

The package implements an import-triggered detached remote-code loader, not a bounded package feature. The absence of an npm lifecycle hook does not mitigate runtime arbitrary code execut...

This is a concrete postinstall chain that installs a native payload and uses it to alter third-party AI-agent hooks. The behavior meets the install-hook abuse block policy despite package...

This is an unconsented postinstall mutation of a broad AI-agent control surface, with automatic third-party command setup and credential forwarding. The global-install gate does not estab...

The package contains deliberate, top-level, targeted browser disruption in both published entrypoints. Although it has no install hook, its import-time protestware behavior is concrete an...

This is a concrete automatic install-time remote code delivery path with certificate verification disabled and no payload integrity check. The postinstall also mutates hidden asset links,...

This package performs concrete, unconsented postinstall persistence and silent software installation on Windows. The behavior is automatic rather than an explicit user setup command.

Static inspection confirms an automatic lifecycle path that modifies global Codex trust and hook configuration based on the presence of Codex state. This creates persistent package-contro...

The package has a concrete automatic lifecycle chain that deletes files and installs remotely obtained skills across multiple AI-agent directories. This meets the install-hook abuse block...

The automatic postinstall hook performs broad persistent mutations and installs a third-party AI-agent executable without an explicit user command. This meets the install-time foreign AI-...

The package contains an automatic lifecycle hook that reads and transmits a credential from the consumer environment. Although framed as license validation, this is a concrete install-tim...

The package has a concrete automatic credential-transmission path in preinstall. The limited request payload does not remove the risk of exporting an environment secret during dependency...

The package has a concrete automatic install-time credential transmission path. Static icon exports do not justify sending an environment secret during installation.

The automatic postinstall chain force-installs package-controlled skills into multiple foreign global AI-agent directories. This is unconsented lifecycle-based control-surface mutation.

The package uses postinstall to execute an opaque native installer that configures AI-agent hooks and includes a Codex setting mutation marker. This is a concrete unconsented lifecycle co...

This is an unconsented postinstall mutation of broad AI-agent control surfaces, with remote npx execution and deliberate obfuscation. It meets the install-hook abuse block boundary.

This is an unconsented install-time mutation of a broad AI-agent control surface through a remote, latest-version installer. The lifecycle implementation is also deliberately obfuscated.

This is an unconsented postinstall mutation of a foreign, broad AI-agent control surface. The lifecycle script silently installs unrestricted command hooks, which meets the install-hook a...

The package has a concrete automatic postinstall path that mutates foreign global AI-agent control surfaces. This meets the install-hook abuse blocking boundary despite the absence of dir...

The package deliberately forwards NPM bearer credentials and selected package data to an unrelated Worker during its advertised publishing flow. Although user-invoked and without install...

The opaque third-party proxy receives an npm credential and uploaded files, creating a concrete credential and data exfiltration path. The absence of install hooks does not remove this us...