npm detections from LPM Firewall.

The package contains a concrete, enabled-by-default data-export path to package-specified external webhooks. The lack of an install hook does not mitigate this runtime exfiltration behavior.

This is a concrete AI-agent control-hijack surface, not ordinary documentation: reviewer and release instructions are embedded in runtime prompt construction. The absence of install hooks...

This is concrete, unconsented postinstall mutation of broad foreign AI-agent control surfaces. The absence of observed exfiltration does not neutralize the automatic cross-platform contro...

The package implements automatic collection and remote transmission of high-value credentials through its cloud launcher. This is concrete data exfiltration, not merely telemetry or a loc...

This is concrete, automatic postinstall mutation of foreign AI-agent control surfaces plus execution of a remotely selected native binary and broad host changes. The global-install guard...

The automatic, unpinned global self-update is a concrete remote code execution supply-chain path, not required for commit-message generation. No install hook is present, but runtime activ...

The automatic lifecycle hook broadly mutates a foreign consumer project's AI-agent control surface. This meets the publish-block policy regardless of the absence of observed exfiltration.

The package contains a complete default-runtime chain for remote-controlled, unconsented mutation of a user's WhatsApp account subscriptions. The benign Node version preinstall check does...

The package has no install hook, but its normal Android initialization sends sensitive account configuration to an unrelated remote logging endpoint. This is concrete credential and metad...

This is concrete credential exfiltration through a hardcoded remote logging endpoint. The absence of an install hook does not mitigate the runtime disclosure.

This is concrete credential exfiltration through a normal package runtime path, not a football-data request. Error suppression and the unrelated hardcoded receiver make the behavior malic...

This is a concealed, remotely controlled redirect chain embedded in a fake verification page. The lack of npm lifecycle hooks does not remove the concrete browser-side phishing risk.

The package contains a direct, silent network path from account configuration that includes IMAP passwords to an unrelated external logging host. This is concrete credential exfiltration,...

This is concrete credential exfiltration: a default runtime path serializes an IMAP object containing a password and transmits it to a remote logging host. The local-only postinstall hook...

The package contains a concealed, remotely directed mutation of the authenticated user's WhatsApp newsletter subscriptions. Its harmless Node-version preinstall check does not mitigate th...

The package contains a concrete hidden account-manipulation path in the normal socket lifecycle. Its remote input permits the maintainer to choose affected newsletters after publication.

The package contains a concrete, automatic remote-controlled action that changes a user's WhatsApp account state. Its benign Node-version preinstall check does not mitigate that behavior.

This package presents itself as cache cleanup but implements remote-controlled deletion of an entire project directory. The explicit-call requirement reduces automatic exposure but does n...

This is a destructive payload disguised as cache cleanup: it removes arbitrary project contents after remote authorization. The absence of an install hook limits automatic execution but d...

This is concrete remote code execution activated by a normal import, not merely a validator. The signing gate authenticates the publisher-controlled remote payload but does not make its a...

This is a concrete automatic postinstall modification of consumer AI-agent control files, including AGENTS.md and newly created .claude files. The safeguards against clobbering do not est...