npm security reports, with evidence.

This is an automatic, obfuscated DNS exfiltration path unrelated to an ABI library. It activates both at install time and import time without consent.

The automatic postinstall hook modifies unoccupied global AI-agent command names, creating a concrete command-control hijack surface. Its guards reduce scope but do not provide prior cons...

The automatic postinstall hook mutates broad user-level Codex and Claude skill locations and can delete destination content. This is concrete install-hook abuse under the stated policy.

The automatic lifecycle hook mutates consumer package-manager configuration and AI-agent control files, then installs instructions designed to prevent review of those files. This is concr...

The package uses automatic install hooks to transmit host-identifying information to unrelated fixed external endpoints. This is concrete malicious data exfiltration behavior.

Automatic lifecycle hooks actively beacon local system metadata to fixed external endpoints. The behavior is concrete install-time data exfiltration, not normal package functionality.

This is concrete, automatic install-time collection and external transmission of host data. The behavior is not needed for the declared package and constitutes malicious data exfiltration.

Hard-coded remote webhook destinations combined with automatic serialization and sending of order-log payloads establish concrete data exfiltration behavior. The absence of an install hoo...

The package contains a complete active data-export path from runtime logger records to package-selected webhook recipients. The absence of an install hook limits the trigger but does not...

The package is an obfuscated, remotely directed browser redirector presented as a security challenge. This is concrete deceptive traffic-routing behavior, not a package-aligned application.

This is an active, obfuscated browser redirect and visitor-data forwarding payload with no stated package functionality. It is not normal npm package behavior and conceals its remote dest...

The primary entrypoint performs an unconditional network beacon containing local host and user metadata to a third-party endpoint. This is concrete data exfiltration, even though the brok...

Automatic install hooks exfiltrate host and username data to an unrelated external endpoint. The behavior is concrete and active, so the package should be blocked.

The package has a concrete automatic postinstall exfiltration path to an unrelated webhook endpoint. The collected host and user metadata is sent without user interaction or package-align...

The package has an automatic postinstall beacon that exfiltrates local system and project metadata to a third-party endpoint. This is concrete malicious install-time data collection.

The package creates an automatic install-time path from an unverified remote archive to installed native code. Obfuscation and the absence of integrity validation make this concrete remot...

The package actively implements concealed, challenge-gated remote redirection in its only payload. Its opaque implementation and lack of legitimate package behavior support blocking it as...

The package performs automatic postinstall mutation of a consumer Git hook and arranges future command execution. The checkout guard does not remove the unconsented lifecycle persistence.

The package uses an automatic postinstall hook to mutate a global AI-agent plugin control surface. This is concrete unconsented persistence into OpenCode configuration, so it meets the in...

The automatic lifecycle hook performs broad global AI-agent configuration mutation, including AGENTS.md, plugins, agents, commands, and skills. This is concrete unconsented control-surfac...

The postinstall hook performs cross-product AI-agent skill deployment into home-directory control surfaces. This meets the blocking policy for unconsented install-time mutation of a forei...