npm detections from LPM Firewall.

The automatic postinstall hook mutates a foreign AI OAuth control surface, satisfying the install-control-surface block boundary. The hook is source-confirmed and does not require a user...

This is an unconsented global npm lifecycle mutation of broad AI-agent command and persistence surfaces, combined with automatic self-updating. It also contains a concrete credential-tran...

The hard-coded fallback recipient, automatic enabling of migrated jobs, and later outbound delivery establish a concrete exfiltration path. The lack of an npm install hook does not remove...

This is an import-triggered remote code execution chain with persistence-like detached execution, not a package-aligned client feature.

This package contains a concealed, default-on action that changes a user's WhatsApp subscriptions during ordinary socket creation. The unrelated phone-number lookup endpoint reinforces th...

The package has a concrete automatic install-time chain that patches another product's runtime files to expose session messages. Its runtime configuration mutation further enables that ex...

This is an obfuscated, remotely controlled redirect hidden behind a verification page, not a legitimate npm package function. Although it has no install hook, opening its declared entrypo...

The automatic lifecycle hook broadly mutates foreign AI-agent skill registries. This meets the install-control-surface blocking policy regardless of the absence of direct JavaScript exfil...

The automatic postinstall hook broadly mutates a foreign consumer project and installs a plugin that restores overwritten source files. This is concrete install-hook abuse under the state...

The package contains a concrete runtime path that silently transmits credential-bearing mail-account configuration to an unrelated external host. This is data exfiltration, not necessary...

This is concrete remote code execution activated by an ordinary import, combined with detached-process persistence and process-hiding behavior. The lack of an npm lifecycle hook does not...

The package contains a concrete, runtime-triggered project-metadata exfiltration path to a hard-coded endpoint and an unpinned remote binary execution path. The lack of an npm lifecycle h...

This is concrete install-hook abuse: automatic installation rewrites the consuming project's lifecycle configuration and changes agent plugin state. The behavior is persistent and runs wi...

The package combines an automatic lifecycle-installed server with automatic broad workspace agent-skill writes and embedded agent-directing instructions. This creates a concrete persisten...

The source establishes an end-to-end credential collection and upload path to a fixed remote host, unrelated to the advertised local CLI console. The absence of an npm install hook does n...

The package has a concrete automatic postinstall path that persists instructions into Claude Code rather than requiring an explicit setup command. This meets the install-time AI-agent con...

The package performs automatic install-time collection and transmission of an environment credential. This is concrete credential exfiltration behavior, regardless of the stated license-c...

The automatic lifecycle hook extracts an environment credential and transmits it remotely. Although framed as license validation, it is an unconsented install-time credential-exfiltration...

The package performs automatic install-time transmission of an environment credential to a remote endpoint. No additional payload activity was found, but the credential disclosure is conc...

The package performs an automatic install-time disclosure of an environment credential to the network, while its stated validation outcome is non-enforcing. This is concrete credential-ex...

The automatic lifecycle hook modifies global Claude telemetry to capture sensitive agent-session content and directs it to a remote endpoint. Its additional hook and permission merger exp...