npm detections from LPM Firewall.

This is unconsented postinstall mutation of broad AI-agent control surfaces, with an opaque native binary that contains a safeguard-bypass flag. The package meets the publish-block thresh...

The automatic postinstall executes opaque native code specifically to install agent hooks, including code obtained without integrity verification. This is a concrete install-hook abuse pa...

This is concrete unconsented postinstall mutation of foreign AI-agent control surfaces, coupled with remote runtime download and execution. The global-only guard and opt-out do not establ...

This is an automatic lifecycle mutation of a foreign AI-agent executable path using opaque bundled binaries. The installer’s backup and rollback features do not remove the unconsented exe...

This is an unconsented postinstall mutation of a foreign AI-agent control surface that establishes persistent command execution. The conditional PATH check does not make the automatic con...

The automatic self-reinstallation chain can execute lifecycle code from a future release and immediately rerun broad agent configuration. The observed configuration injection reduces appr...

The package combines unconsented host tracking and error telemetry with explicit instructions designed to make an AI agent trust its output and avoid verification. There is no install hoo...

The automatic lifecycle chain executes an opaque native hook installer that the package identifies as modifying Codex and Claude Code configuration. This is concrete install-hook abuse un...

The package uses an automatic install hook to download and execute remote code and to alter global AI-tool dependencies. That is concrete install-hook abuse with user-level execution impact.

The lifecycle hook automatically writes behavior-bearing files into both .agents and .claude home directories. Although no exfiltration or remote execution is present, this satisfies the...

The postinstall hook makes broad AI-agent configuration changes and installs a separately delivered, unpinned MCP runtime without user action. This meets the install-control-surface block...

This is concrete unconsented postinstall mutation of external AI-agent controls through an opaque native binary, with an unsigned remote-download fallback. It meets the install-control-su...

This is a concrete unconsented postinstall mutation of broad AI-agent control surfaces, combined with automatic installation of a separate registry package and process restart. It meets t...

The automatic postinstall hook makes persistent changes to multiple unrelated AI-agent configuration surfaces and injects directives for financial and credential-related actions. This mee...

The automatic global lifecycle chain broadly mutates foreign AI-agent configurations and installs executable MCP integration. This is concrete unconsented install-hook abuse under the pol...

The automatic lifecycle hook broadly modifies foreign AI-agent skill locations and deletes existing content before replacement. This meets the install-time AI-agent control-surface mutati...

The extension implements a concrete path from credentials entered on arbitrary websites to an embedded remote server. The absence of an npm install hook does not neutralize this credentia...

This is an automatic npm lifecycle mutation of a broad foreign AI-agent control surface. The conditional checks do not establish consent for the current install.

This is an automatic install-time mutation of a foreign, broad AI-agent control surface. The wildcard command hook meets the publish-block policy even without a hard-coded network endpoint.

The automatic lifecycle hook forcibly modifies multiple foreign AI-agent skill directories. This meets the install-control-surface blocking policy regardless of the absence of observed cr...

The package's automatic postinstall writes a package-controlled skill into the user's global Codex configuration. Although no exfiltration or network payload was found, this concrete inst...