npm detections from LPM Firewall.

The package performs unconsented privileged-capable system mutation from an automatic install hook and repeats it on ordinary execution. This is a concrete install-hook abuse path, not me...

This is an unconsented install-time mutation of broad consumer project and AI-agent control surfaces, with durable execution paths added to later installs and Git operations. The behavior...

The automatic postinstall hook writes package-controlled content into the global Claude Code skills directory. That concrete lifecycle-based agent control-surface mutation meets the publi...

The automatic lifecycle hook performs remote content retrieval and broad global AI-agent configuration writes. That is concrete unconsented install-time control-surface mutation.

This is concrete unconsented postinstall mutation of a broad AI-agent control surface. The lifecycle hook persists package-controlled commands and instructions globally, meeting the insta...

The package performs unconsented postinstall mutation of the user's Claude command area and automatic MCP registration. Those actions constitute a concrete install-time AI-agent control-s...

This is an unconsented postinstall mutation of broad project and AI-agent control surfaces, reinforced by detached lifecycle reconciliation. No secret theft was found, but the automatic c...

Source directly shows a site token copied into Authorization headers and reused for requests to numerous alternate domains. This is concrete credential exfiltration rather than ordinary p...

This is an automatic install-time path that invokes opaque native code to configure Codex and Claude hooks, rather than an explicit user setup action. The visible source establishes a bro...

The hidden phrase-based privilege elevation, unauthenticated proxy route, and unrestricted command runner form a concrete remote agent-control chain. The lack of an install hook does not...

The package performs automatic postinstall mutation of both Codex and Claude global skill directories and installs Python dependencies into the user environment. This meets the install-co...

This is a complete automatic lifecycle and self-dependency chain that broadly mutates a foreign AI-agent control surface. The OAuth implementation does not neutralize the unconsented pers...

This is an unconsented postinstall mutation of a foreign, global AI-agent control surface. The binary-presence guard does not remove the automatic configuration change.

The package performs automatic postinstall mutation of consumer lifecycle and AI-agent configuration, including third-party plugin installation. This is a concrete install-hook abuse path...

This is concrete install-time AI-agent control-surface mutation, not merely a user-invoked setup command. The global-install guard does not make the automatic cross-product configuration...

The package performs unconsented postinstall mutation of a consumer project and AI-agent control surfaces. This is concrete install-hook abuse even though no secret theft was found.

This is concrete unconsented postinstall mutation of consumer and AI-agent control surfaces, combined with cache deletion and global command installation. The behavior exceeds package-loc...

The package contains reviewer and AI-directed verdict-control text in its MCP implementation. Although it lacks an npm install hook, this is a concrete agent-control attack surface when i...

The automatic lifecycle chain writes into a broad global AI-agent control surface. Its scoped filenames and lack of confirmed exfiltration reduce the apparent payload severity, but they d...

The package has a registry-install postinstall hook that recursively deletes and replaces Claude Code skills in the consumer project. This meets the install-time AI-agent control-surface...

The package has a concrete automatic postinstall chain that writes global AI-agent instruction files and can source content from an unpinned remote branch. This meets the install-control-...