npm detections from LPM Firewall.

The package has no install hook, but its shipped server contains an unrelated email and data-collection backdoor with an embedded credential. That concrete hidden capability warrants bloc...

This is a counterfeit Grok package with an automatic lifecycle hook that deploys a publisher-controlled executable and alters foreign AI CLI state. The lack of direct JavaScript exfiltrat...

The published runtime bundle contains an opaque remote-code execution chain disguised as a benign worktime command. This is a concrete attack surface, not merely a network client or a use...

The automatic lifecycle hook executes an opaque binary that modifies shared AI-agent configuration and can overwrite user assets. This meets the install-hook abuse boundary even without e...

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces, including a machine-wide executable pre-tool hook. The absence of observed secret exfiltration doe...

The install-time hook silently makes broad global agent and shell changes, then injects mandatory conversation-logging instructions. This meets the policy for malicious install-hook abuse...

The automatic postinstall mutation of global AI-agent skill directories is a concrete unconsented control-surface write. Remote-fetched content makes that install-time mutation more severe.

The package uses automatic install hooks to mutate consumer project lifecycle configuration and user-wide Codex registrations. This is a concrete AI-agent control-surface takeover rather...

The package combines external AI-controlled command execution with disclosure of a GitHub token to a non-GitHub endpoint. Install hooks and a detached global updater further expand the un...

The package implements unconsented postinstall mutation of consumer-project and user AI-agent control surfaces, including third-party plugin installation. This meets the install-hook abus...

The package's global postinstall automatically installs PATH-shadowing Claude and Codex shims plus persistent schedulers. Its hard-coded remote sync target and setup-token transfer create...

The automatic lifecycle hook downloads or executes an opaque native payload and uses it to modify Codex and Claude Code integration settings. This is a concrete unconsented AI-agent contr...

The automatic global postinstall performs broad foreign AI-client configuration mutation and installs backend-directed native code without integrity verification. Its persistence mechanis...

This package combines an automatic install lifecycle with broad AI-agent command interception, persistence, a default remote target, and automatic self-updating. These are concrete instal...

The automatic postinstall mutates a foreign AI-agent control surface by globally installing Claude Code, alongside persistent user-environment and application changes. Although no direct...

Source inspection confirms automatic, unprompted persistence and transmission of a unique installation identifier on ordinary CLI execution. The explicit agent configuration commands are...

The package performs automatic install-time extraction and network transmission of an environment credential. This is a concrete credential-exfiltration surface, regardless of the stated...

The package has a concrete automatic credential-exfiltration path in its preinstall hook. Swallowing invalid-license errors makes the stated validation ineffective while preserving the se...

The package has a concrete preinstall credential-transmission path. Its narrow scope reduces impact, but source inspection cannot establish that the recipient is authorized to receive the...

The package performs automatic install-time transmission of an environment credential. Static inspection found no other execution or mutation behavior, but this concrete credential-exfilt...

The package has a concrete automatic install-time credential exfiltration path. The otherwise static icon exports do not mitigate the preinstall behavior.