@readystack
LPM Firewall blocks 17 packages in the @readystack npm scope. 17 have LPM's own review and are listed first.
The CLI forwards a Polar license key to getreadystack.com automatically at startup, including when the user did not request a rules-feed operation. This is credential exfiltration to a ho...
The CLI automatically forwards a stored or environment-provided license key to getreadystack.com as part of its rules-feed request. This is credential disclosure to the package vendor wit...
The CLI automatically sends a Polar-validated license credential to a separate host on startup, without an explicit request to share it with that host. This is credential exfiltration eve...
The CLI automatically forwards a configured license key to getreadystack.com before processing any command. The key is also used for validation at api.polar.sh, making this credential dis...
The CLI automatically forwards a Polar license credential to getreadystack.com in a feed request before processing any command. Because the key is validated by api.polar.sh, sending it to...
The CLI automatically forwards its license key to `getreadystack.com` on startup, while the key is also used to validate licenses at `api.polar.sh`. This is credential exfiltration to a s...
The CLI automatically sends a Polar license key to getreadystack.com before processing any command. Because the key is a credential for a different service and this transfer is not disclo...
The package sends a Polar license key to getreadystack.com in an automatic startup request, including before handling free commands. This is credential exfiltration to a host other than t...
The package's CLI automatically sends a stored or environment-provided license key to getreadystack.com, while license validation uses api.polar.sh. This is credential disclosure to a dif...
The CLI automatically forwards the Polar license key to getreadystack.com on startup, including for commands that do not require a license. This is credential exfiltration to a host other...
The executable’s startup path forwards a Polar license credential to a package-selected endpoint on getreadystack.com. This is a concrete credential disclosure supporting a publish block.
The active CLI path sends a license credential to a package-selected recipient outside the license validation endpoint. This is concrete credential disclosure, so blocking is warranted.
The inspected source establishes an automatic transfer of a Polar license credential to a package-selected host. The transfer is gated by key availability and cache age, but not by recipi...
The executable startup path automatically sends a license key to the publisher’s feed host when its cache is absent or stale. This is an unconsented credential transfer to a package-selec...
The active CLI path automatically discloses a stored or environment-provided licence key to the publisher's endpoint. This is concrete credential exfiltration and supports blocking public...
The source shows an ordinary CLI invocation can forward a license credential to a publisher-selected host outside the service used to validate it. This is concrete credential disclosure,...
On CLI startup, the package automatically forwards a stored or environment-provided license credential to a fixed publisher endpoint when the feed cache is stale or absent. This unconsent...