npm detections from LPM Firewall.

The automatic lifecycle chain executes mutable remote code and changes global tooling and skills without consent. This is concrete install-hook abuse, not merely user-invoked setup.

This is a concrete, unconsented install-hook abuse chain that broadly mutates and persistently controls consumer application files. No install-time exfiltration was found, but the destruc...

This is an unconsented install-time mutation of a consumer AI-agent control surface followed by interception and remote transmission of application AI content. It meets the publish-block...

The lifecycle hook automatically mutates multiple foreign AI-agent skill roots. This concrete unconsented install-time control-surface write meets the publish-block policy.

The install hook silently rewrites a consumer application's AI module resolution and causes captured AI content to be uploaded. The explicit CLI does not remove the risk because the posti...

The automatic postinstall overwrite of multiple third-party AI-agent skill locations is concrete install-hook abuse. The lack of installer network activity does not remove the control-sur...

The automatic lifecycle hook writes package-controlled instructions into multiple foreign AI-agent skill directories. This meets the install-time AI-agent control-surface mutation block p...

Source inspection confirms credential collection and transmission of the raw GitHub token to a hard-coded non-GitHub endpoint. This is concrete credential-exfiltration behavior, despite b...

This is unconsented postinstall mutation of foreign AI-agent configuration and instruction surfaces. It meets the install-hook abuse blocking policy even without demonstrated credential t...

The automatic postinstall rewrite of a separate AI-agent extension is a concrete foreign control-surface mutation. Its narrow visible purpose reduces certainty about broader intent but do...

This is an automatic install-time remote code delivery chain with disabled TLS validation and no integrity verification. The downloaded native payload is opaque to the package review and...

This is concrete, obfuscated payment-flow hijacking and external data transfer, even though it is not automatically run by npm installation. The missing declared entrypoint further sugges...

The package establishes a concrete default route from Codex requests to third-party endpoints and conceals a pool of provider credentials. Its limited native-build postinstall hook does n...

The package has a concrete automatic postinstall chain that replaces skill content in Claude Code, generic agent, and Codex directories. This meets the install-time AI-agent control-surfa...

This is an unconsented postinstall modification of a consumer application's AI module combined with collection and remote transmission of sensitive AI interaction data. The guarded projec...

The source establishes a default, automatic exfiltration path to fixed third-party-controlled endpoints. The absence of an install hook does not remove the runtime disclosure risk.

The automatic postinstall hook broadly mutates foreign AI-agent skill and plugin control surfaces, including enabling and installing a Codex plugin. This is concrete unconsented install-h...

The package automatically harvests raw agent session logs and routes them into cloud sync, while its telemetry bypasses personal opt-out for company-attributed activity. The guarded globa...

The package contains concrete import-time protestware in both published JavaScript entry bundles. The lack of install hooks does not mitigate the targeted runtime denial of page interaction.

The automatic lifecycle changes consumer package-manager behavior and writes AI-agent instructions, skills, and review exclusions into the project. These actions are concrete control-surf...

The package uses an automatic npm lifecycle hook to modify the host OS and request privileged package installation. This is concrete install-hook abuse, not a user-invoked setup action.