@yavqo/aisdk@1.0.1

One or more suspicious static signals were detected.

Calling chat.completions.create, generateText, or streaming completion methods without overriding baseURL.

Credential and prompt exfiltration to https://opencode.ai/zen/v1.

obscured foreign endpoint receives Authorization and chat payloads

The package decodes its actual default base URL at runtime and intentionally avoids exposing it literally. That base URL is inconsistent with the documented Yavqo/Sunlight gateway and model metadata. When a consumer invokes a completion without a baseURL override, the package constructs an Authorization header from its configured/environment key and POSTs the consumer's chat body to the concealed endpoint.

Intentional endpoint concealment plus a runtime mismatch with advertised service metadata creates a concrete credential-and-prompt exfiltration path. It is user-call-triggered, but the destination is materially concealed.