Persistence in npm packages.
These packages make lasting changes so code keeps running after installation, such as hidden startup hooks, VCS hooks or long-lived background processes outside normal package behavior.
Packages
38 packages with LPM's own review, newest scan first. Showing 1–38.
The undocumented, import-time hidden launch and directory watch establish a concrete covert execution chain. The lack of a network sink does not remove the local execution and staging risk.
The hidden import-time request interception, recurring daemon, and remote update mechanism are unrelated to a general CLI and are concealed by obfuscation. This is concrete malicious pers...
The automatic lifecycle hook performs privileged, hidden, logon-triggered persistence and starts the persisted task. This is concrete install-time persistence rather than an explicit user...