npm detections from LPM Firewall.

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces. The lifecycle hook, global writes, and agent-directing payload form a concrete install-hook abuse...

This is an unconsented postinstall mutation of foreign, broad AI-agent control surfaces. The lifecycle hook directly registers a server for both Claude Code and Codex.

The automatic postinstall hook writes global Claude Code and Codex MCP configuration and registers package-controlled executable code. This meets the install-hook abuse policy even though...

This is unconsented postinstall mutation of a broad AI-agent control surface. The lifecycle hook persists package-controlled commands and instructions in the user's global Claude Code con...

The automatic lifecycle hook mutates a foreign global AI-agent installation and persistent user configuration. This is a concrete install-time control-surface risk even though no credenti...

The global-install guard limits exposure, but it does not provide consent for an npm lifecycle hook to execute downloaded shell code and modify the user's Codex installation. This is conc...

The automatic postinstall hook broadly mutates foreign AI-agent configuration and establishes a self-updating execution path through local-mcp@latest and remote binaries. This is concrete...

The package has a concrete install-time remote code execution path: a lifecycle hook fetches and executes a shell script and installs remote code. No credential theft was established, but...

Source directly establishes credential submission to a fixed unexpected endpoint and persistence of its session routing. The lack of an install hook does not remove the credential-exfiltr...

The automatic postinstall, runtime self-install of a moving release range, binary launcher replacement, and consumer-environment mutation meet the lifecycle self-dependency policy for a m...

The package uses an automatic npm lifecycle hook to mutate several foreign global AI-agent skill directories and to obtain content from the network. This is a concrete unconsented control...

The hidden cross-agent identity logic accesses a foreign private key and uses it to authenticate outbound requests for a pinned target. Opt-in telemetry does not mitigate this concrete ru...

The package performs unconsented postinstall mutation of an external AI-agent control surface and broad user-home cleanup. Its automatic executable download adds a separate supply-chain r...

The package automatically installs unrestricted global Claude Code hooks rather than requiring an explicit user setup action. This meets the install-time AI-agent control-surface abuse bl...

The package contains concrete, import-time targeted browser sabotage unrelated to import/export UI functionality. The absence of an install hook does not mitigate this malicious runtime b...

This is a concrete unconsented postinstall mutation of a broad AI-agent control surface. The automatic lifecycle chain and persistent global command and instruction registration meet the...

The package’s postinstall performs broad, persistent AI-agent and Git configuration without an explicit user setup action. This meets the install-hook abuse blocking policy.

This is unconsented postinstall mutation of broad foreign AI-agent control surfaces, including destructive replacement. The behavior meets the install-hook abuse blocking policy.

This is an unverified remote-code launcher over HTTP with automatic update behavior and an external-package fallback. Although it lacks an install hook, the explicit CLI invocation create...

The package performs automatic postinstall AI-agent hook and configuration changes through an opaque executable. This is a concrete unconsented control-surface modification, not an explic...

The package performs automatic install-time network retrieval and execution of an opaque binary, then automatically installs agent skills. This creates a concrete unconsented AI-agent con...