npm detections from LPM Firewall.

This is an unpinned remote-code-execution supply-chain path, not merely content retrieval. No npm install hook is present, but runtime execution of downloaded latest-version Python is con...

This is an automatic postinstall mutation of foreign AI-agent control surfaces, including destructive replacement of existing skill directories. The later skill resolver also performs pac...

The only executable behavior is an automatic preinstall reverse-shell command with external network communication. This is concrete malicious install-hook abuse.

The automatic lifecycle hook performs broad, unconsented mutation of consumer AI-agent control surfaces and adds command permissions. This meets the install-hook abuse blocking policy.

The automatic lifecycle hook broadly installs package-controlled skills and enables a plugin/MCP endpoint across unrelated AI-agent environments. This meets the install-hook abuse blockin...

This is concrete, automatic, remotely directed manipulation of a connected consumer WhatsApp account. The benign Node-version preinstall check does not mitigate the runtime behavior.

The sole package source defines an automatic preinstall reverse shell and outbound output transfer. This is concrete install-time remote code execution behavior.

Direct source inspection confirms automatic postinstall modification of a foreign AI dependency and recursive deletion of user agent state. This is concrete install-hook abuse, not merely...

The sole lifecycle hook contains concrete reverse-shell and output-exfiltration behavior that runs automatically on installation. The package should be blocked.

This is an unconsented postinstall mutation of foreign AI-agent configuration and skill directories. The automatic lifecycle chain is concrete and sufficient to block publication.

The postinstall hook deletes and replaces multiple AI-agent skill directories without a user command or consent. This meets the install-control-surface block condition even though no cred...

The manifest contains an automatic preinstall reverse-shell command to an external IP, plus an outbound POST. The claimed canary purpose does not provide consent or make this install-time...

The package contains a concrete install-time reverse-shell command with network output transfer. Its lifecycle trigger makes the behavior automatic for consumers.

The automatic postinstall mutation of broad, foreign AI-agent control surfaces is concrete and unconsented. The code also deletes prior directories before writing replacement instruction...

The automatic postinstall path performs broad user-level AI-agent configuration mutation and destructive replacement without explicit user setup. This meets the install-hook abuse policy...

The automatic lifecycle chain modifies global AI-agent configuration locations across multiple platforms. This meets the install-control-surface policy for blocking.

This is not a passive connector: it combines remote terminal observation and prompt injection with default permission bypass and persistent changes to a broad AI-agent control surface. Th...

The automatic lifecycle hook changes consumer-project package-manager settings and installs AI-agent instructions that suppress review and encourage secret disclosure. These concrete beha...

This is a concrete automatic lifecycle hook that broadly mutates foreign AI-agent configuration and extension directories, with an additional automatic project upgrade. The absence of obs...

The manifest contains a concrete automatic reverse-shell-style command and remote POST behavior. This is malicious install-hook abuse, regardless of its canary-themed description.

The package contains concrete runtime redirection of model traffic and embedded obfuscated credentials, not merely optional user-supplied networking. Its benign node-pty postinstall hook...