npm detections from LPM Firewall.

The package performs automatic install-time transmission of a credential from the consumer environment. The claimed license-check purpose does not remove the concrete credential-exfiltrat...

The package performs automatic install-time transmission of an environment credential to a remote service. This concrete credential exposure is unrelated to rendering icon components and...

The package contains a concrete automatic install-time credential exfiltration path. Static icon exports do not mitigate that behavior.

This package automatically exports an environment credential during installation, while its supposed validation failures are swallowed. That is credential exfiltration in an install hook.

The automatic lifecycle hook exports an environment credential to a remote host while suppressing failed validation. That is concrete credential exfiltration at install time.

This package performs automatic install-time transmission of an environment credential to a remote endpoint. The static icon code does not require that operation, making the lifecycle beh...

The package has a concrete install-time credential-exfiltration path: it reads an environment secret and transmits it over the network. The lifecycle hook makes the transfer automatic for...

The inspected lifecycle path establishes automatic, non-interactive mutation of a consumer project's Claude hook settings. Under the install-control-surface policy, that concrete postinst...

Although its automatic hook only initializes package-owned configuration, the package contains a direct, functional third-party entitlement and gate-bypass capability. That concrete tampe...

The lifecycle hook performs broad, destructive AI-agent configuration mutation in the consumer project without an explicit user command. This meets the install-hook abuse blocking policy.

This package performs concealed, automatic actions on a user's external messaging account and phones home with a machine-derived fingerprint on normal use. The install hook is not the pri...

The automatic postinstall hook persistently injects behavior-bearing instructions into multiple unrelated AI-agent configurations. This is unconsented install-time AI-agent control-surfac...

The source directly connects account configuration serialization to an external logging request. Absence of an npm lifecycle hook does not mitigate this runtime credential-exfiltration path.

This is an intentionally targeted CSS and JavaScript attack package, not a theme. Its network requests and token-handling code establish malicious browser-side behavior even without an np...

The package explicitly implements targeted CSS command-and-control and exfiltration-marking requests against an administrative API. The lack of install scripts does not remove the malicio...

The package performs automatic postinstall rewrites of user Cursor and Codex MCP settings, alongside broad consumer-project mutation. This meets the blocking policy for unconsented lifecy...

This package is a disguised browser redirector with encrypted, server-selected payload delivery. The absence of npm lifecycle hooks does not neutralize the concrete malicious behavior exe...

The package embeds an active service-worker proxy application in an SVG declared as its npm entry point. Its automatic scope-wide request interception and externally configured traffic re...

The package has no npm lifecycle hook, but its declared main entrypoint performs unconsented browser-side persistence and ships an obfuscated remote loader. This is concrete malicious beh...

The postinstall hook automatically writes package content into global Claude and Codex agent directories. This concrete, broad agent-control-surface mutation meets the install-time blocki...

This is an unconsented postinstall mutation of broad foreign AI-agent control surfaces, combined with automatic remote native-code execution. It meets the install-hook abuse blocking policy.