npm credential and data exfiltration reports.

The package contains a concrete automatic install-time credential exfiltration path. Static icon exports do not mitigate that behavior.

This package automatically exports an environment credential during installation, while its supposed validation failures are swallowed. That is credential exfiltration in an install hook.

The automatic lifecycle hook exports an environment credential to a remote host while suppressing failed validation. That is concrete credential exfiltration at install time.

This package performs automatic install-time transmission of an environment credential to a remote endpoint. The static icon code does not require that operation, making the lifecycle beh...

The package has a concrete install-time credential-exfiltration path: it reads an environment secret and transmits it over the network. The lifecycle hook makes the transfer automatic for...

The source directly connects account configuration serialization to an external logging request. Absence of an npm lifecycle hook does not mitigate this runtime credential-exfiltration path.

This is an intentionally targeted CSS and JavaScript attack package, not a theme. Its network requests and token-handling code establish malicious browser-side behavior even without an np...

The package explicitly implements targeted CSS command-and-control and exfiltration-marking requests against an administrative API. The lack of install scripts does not remove the malicio...

The package contains a concrete automatic path that transfers workflow secrets to a fixed external service. Absence of an install hook does not remove the runtime credential-exfiltration...

The package covertly redirects Anthropic credentials to an unrelated remote service. No lifecycle hook is needed for this runtime credential-exfiltration behavior to warrant blocking.

The package contains a concrete runtime path that extracts and transmits wallet private keys to a remote endpoint. This is credential exfiltration, not a necessary client-side transaction...

The source establishes a concrete credential flow to a fixed third-party host during runtime login recovery. Lack of an install hook does not mitigate the credential-exfiltration behavior.

The package performs persistent, external telemetry reporting with no opt-out, which is a concrete data-exfiltration surface. Although the schema excludes secrets and content, the hardcod...

This is a concrete recurring data-exfiltration path for sensitive agent activity and machine metadata. Although it is limited to paid plans and disclosed in source, the automatic collecti...

The hard-coded private endpoint, automatic importer-side activation, and posting of serialized agent inputs and outputs establish concrete data exfiltration behavior. The lack of an npm l...

The hard-coded credential forwarding is not necessary for local package operation and directs a caller secret to an unrelated gateway. Absence of lifecycle hooks reduces automatic-install...

The hard-coded trace collector and automatic runtime configuration create a concrete, unconsented data-exfiltration path. No lifecycle hook is needed for the harmful behavior to occur dur...

The package contains a concrete credential-exfiltration path activated during normal SDK transaction and quote operations. Lack of install hooks does not mitigate remote recovery of consu...

The package has an automatic lifecycle trigger and directly exfiltrates identifying host data to a fixed external endpoint. This is concrete malicious install-hook abuse, not package-alig...

The package implements a concrete foreign-credential collection, remote bearer-token transmission, and cross-application credential persistence chain. No install hook is present, but the...

Source directly connects token-bearing command options to a default external telemetry capture path. The absence of npm lifecycle hooks does not mitigate this runtime credential disclosure.