npm credential and data exfiltration reports.

Source directly implements clipboard and screenshot upload to a remote endpoint, with concealment features. The absence of an install hook limits automatic activation but does not remove...

Direct source inspection confirms an install-time exfiltration chain with command execution, credential-adjacent file reads, and a fixed external HTTP receiver. This is malicious behavior...

This is concrete runtime data exfiltration, not merely a capability library: clipboard transmission starts automatically when the CLI runs. The absence of an install hook limits install-t...

This is an unconsented install-time collection and exfiltration chain targeting the consuming project's .env, with an intentionally hidden destination and silent failure handling.

This is a concrete, unconsented install-time credential-harvesting and internal-reconnaissance chain, not package-aligned runtime health behavior.

Direct inspection confirms a concrete automatic reconnaissance-and-exfiltration chain, not merely suspicious primitives. The benign UI entrypoint does not justify the install-time behavior.

This is concrete runtime data exfiltration through automatic clipboard collection and remote POSTs, supplemented by screenshot upload capability. The absence of lifecycle hooks does not r...

This is concrete, obfuscated, install-time data exfiltration with no user action beyond installation. It meets the blocking threshold.

This is a concrete install-time data-exfiltration chain with obfuscation and shell execution. It is malicious, not package-aligned behavior.

This is concrete, unconsented install-time collection and external exfiltration of sensitive host data. The package contains no legitimate implementation that would justify this behavior.

This is concrete, unconsented install-time reconnaissance and exfiltration rather than a package-aligned function. The environment guard narrows targeting but does not remove the maliciou...

This is concrete unconsented install-time reconnaissance, exfiltration, persistence, and filesystem mutation. The path gate and stated research purpose do not remove the malicious behavio...

The cwd guard narrows targeting but does not make the lifecycle-triggered internal reconnaissance consensual. Collection is retained locally and TLS validation is disabled.

This is concrete install-time persistence, cross-tenant reconnaissance, remote exfiltration, and runtime-code modification. The research-oriented comments do not negate the implemented be...

This is concrete install-time persistence and data exfiltration, with conditional cross-build dependency mutation. The package's research framing and sandbox guard do not make these actio...

A narrow guard does not make unconsented install-time reconnaissance acceptable in the environment it targets. The lifecycle-triggered collection and external callback establish concrete...

This is concrete, automatic install-time credential and host-data exfiltration to an unrelated fixed endpoint. The behavior is not required by the package’s placeholder runtime library.

Direct manifest inspection confirms an automatic preinstall hook that exfiltrates the complete process environment to an unrelated external webhook. This is concrete malicious install-tim...

The concealed post-verification redirect and wholesale query forwarding are concrete browser-side attack behavior, not package-aligned functionality. It does not execute during npm instal...

Source inspection confirms a deliberately obfuscated, unconditional browser redirect that forwards query parameters after a deceptive verification screen. The absence of install hooks lim...

Direct source inspection confirms an install-time metadata collection and external exfiltration chain. The package has no other source files establishing a legitimate package function.