npm detections from LPM Firewall.

OpenSSF Malicious Packages via OSV confirms discord-mfa-solver@1.0.1 as malicious (MAL-2026-16100): Malicious code in discord-mfa-solver (npm)

OpenSSF Malicious Packages via OSV confirms discord-mfa-solver@1.0.0 as malicious (MAL-2026-16100): Malicious code in discord-mfa-solver (npm)

OpenSSF Malicious Packages via OSV confirms @haimiya/baileys@9.4.6 as malicious (MAL-2026-16066): Malicious code in @haimiya/baileys (npm)

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces, combined with automatic user-environment package installation. The behavior meets the install-hook...

The package has a concrete automatic postinstall path that persists package-controlled skills into both Codex and Claude user directories and prunes their contents. This meets the install...

This package performs unrequested network activity during installation and automatically changes a user's WhatsApp channel subscriptions through a hard-coded maintainer channel. The opt-o...

The automatic lifecycle hook performs a concrete destructive action by logging out the user and executes opaque native code. Although the binary appears aligned with a Tencent Meeting CLI...

This is an unconsented postinstall mutation of a consumer AI control surface that enables remote collection of sensitive application data. The code establishes the complete configuration-...

This is a concrete automatic postinstall mutation of a consumer project's AI-agent control surface and related development controls. The Suppa-specific guard and opt-out do not provide ex...

The automatic postinstall performs broad consumer-project and AI-agent control-surface mutation. This meets the install-hook abuse block policy despite the package's scope checks and lack...

This is an unconsented postinstall mutation of a foreign AI-agent control surface that redirects application imports into a proxy which exfiltrates AI content. The behavior is concrete an...

The package silently enables remote logging to hard-coded endpoints and sends potentially sensitive application records. The absence of an install hook limits the trigger to runtime use b...

This package automatically injects a broad Claude Code hook configuration during npm postinstall. The automatic foreign agent-control-surface mutation meets the publish-block policy even...

The automatic postinstall chain mutates a foreign consumer repository's AI-agent control surface and related project controls. This is concrete install-hook abuse despite its Suppa-specif...

This is concrete, automatic, destructive mutation of a consumer project at install time, with build-time restoration of package-controlled files. The absence of installer exfiltration doe...

This is a concealed remote code loader, not ordinary image parsing. The absence of an install hook does not mitigate runtime execution of a payload selected by attacker-controlled image d...

The automatic postinstall replaces global Pi agent instructions rather than setting up package-local artifacts, constituting unconsented broad AI-agent control-surface mutation. No creden...

The global-only guard reduces scope but does not obtain explicit consent before postinstall rewrites Claude Code's shared settings and installs persistent hooks. This meets the policy for...

tabwright@4.0.0 uses postinstall to persist package-controlled instructions in ~/.agents/skills. This is an unconsented mutation of a broad AI-agent control surface and meets the publish-...

The hardcoded, active remote logging path is concrete runtime data exfiltration, even though it is not install-time behavior. The absence of lifecycle hooks does not remove the runtime di...

The automatic global AI-agent configuration mutation establishes a concrete install-time control-hijack path. Platform gating and tarball integrity checking do not remove that unconsented...