poly-provider-api@4.6.1

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Application code invokes the package default export.

Remote operator can execute arbitrary Node.js code in the consuming process.

Remote payload fetch followed by Function-based arbitrary code execution.

At runtime, getPlugin requests a hard-coded remote endpoint and treats JSON data.credits as executable JavaScript. It constructs a Function from that response and invokes it with require and process, allowing the endpoint operator to load modules, access files or environment data, run commands through available modules, and persist or exfiltrate data. The published README describes an unrelated provider client interface, obscuring this behavior.

This is a concrete remote-code-execution loader, not a package-aligned API implementation. Lack of an install hook limits automatic activation but does not remove the malicious runtime behavior.