npm detections from LPM Firewall.

The automatic lifecycle hook performs broad, unconsented mutation of foreign AI-agent dependencies and removes diagnostic artifacts. Version checks limit target selection but do not make...

The lifecycle path performs automatic, persistent consumer-project mutation and project-scoped agent plugin installation. This exceeds first-party package-owned extension setup and meets...

The package combines an automatic install hook, broad consumer-project and Claude plugin mutation, and a self-dependency selecting older releases. These concrete behaviors meet the instal...

The package automatically alters a third-party AI SDK OAuth callback page during installation. This is concrete install-hook abuse of a foreign authentication-related control surface, des...

This is an automatic staged remote-code-execution chain at npm postinstall, with no embedded trusted digest or signature for the fetched payload. The absence of visible credential theft d...

The package has no install-time lifecycle hook, but its explicit setup command creates persistent global agent control points that collect transcript content and forward provider credenti...

The package has a concrete postinstall path that mutates consumer AI-agent configuration and installs third-party agent capabilities. This meets the blocking policy for unconsented lifecy...

The package has a concrete automatic postinstall chain that overwrites skill directories for multiple unrelated agent products. The global-install guard and lack of network activity do no...

The package has a concrete automatic install-hook chain that changes global Claude agent behavior and executes package hooks. This meets the install-hook abuse blocking policy despite its...

The package automatically redirects runtime tracing to an unrelated private endpoint and transmits serialized trace data there. The lack of an install hook does not mitigate this import-t...

Automatic lifecycle execution of mutable remote shell code creates a concrete install-time remote-code-execution path. The local opt-outs and same-source checksum checks do not constrain...

The package uses postinstall to write instructions into multiple foreign AI-agent skill directories, rather than requiring an explicit user setup action. This meets the install-time AI-ag...

This is an unconsented postinstall mutation of the broad Claude and Codex command surface, with persistence and a hard-coded remote token-sync destination. The readable source confirms th...

The automatic postinstall mutation of a third-party AI-agent adapter is a concrete unconsented control-surface change. Its narrow and readable implementation reduces ambiguity but does no...

The inspected source establishes automatic, non-user-invoked mutation of both consumer project and user AI-agent control surfaces. This meets the blocking boundary for a postinstall hook...

The package performs automatic, persistent mutation of the consumer project's lifecycle and AI-agent configuration. This meets the install-hook abuse blocking policy even though no secret...

The package has a concrete automatic postinstall chain that modifies foreign AI-agent configuration and enables a plugin. This meets the install-hook abuse boundary despite no observed se...

The automatic lifecycle hook broadly mutates consumer and machine-level AI-agent configuration, including an executable pre-tool hook. This meets the install-control-surface blocking poli...

The package automatically modifies a foreign user-wide AI-agent configuration and enables remote collection of sensitive Claude interaction content. This concrete install-time control-sur...

This is an automatic postinstall mutation of broad, foreign Claude and Codex command control surfaces, with persistence and automatic updating. The global-install guard does not provide s...

The package combines an automatic global postinstall hook with broad third-party MCP configuration writes and a remote, unpinned executable delivery path. The global-only guard and opt-ou...