npm credential and data exfiltration reports.

The compiled source establishes an import-time default exporter that posts trace data to an unrelated hard-coded HTTP address. This is concrete data-exfiltration behavior, not ordinary pa...

The package has no install hook, but its normal runtime path automatically exports conversation data and enables cloud-relayed control of local agent sessions. Those capabilities are acti...

The published runtime automatically exfiltrates agent transcripts to a remote endpoint while suppressing failures and providing no opt-out. This is concrete data exfiltration, not merely...

The package contains active, default-configured external logging routes with hard-coded webhook credentials and sends rich application records to them. The absence of an install hook does...

The package contains a concrete runtime path that exports license keys, host metadata, and exception text to a third-party endpoint. The benign local build-only install hook does not offs...

The package contains a concrete runtime credential redirect to an unrelated fixed endpoint, not merely ordinary API integration. Its main entry exports the feature, making the behavior di...

The package contains a concrete credential collection and transmission path to a hard-coded external endpoint. Although it has no install lifecycle hook, this behavior is sufficient crede...

Source inspection confirms a complete credential capture and upload path to a remote default endpoint. The broad browser permission and unrelated default host make this malicious credenti...

Source inspection confirms a lifecycle-triggered CLI launch and a runtime path that forwards a local credential to a fixed proxy while modifying Claude Code gateway configuration. These b...

The source directly collects GitHub credentials and posts them as bearer authentication to a hard-coded external endpoint. This is concrete credential exfiltration, regardless of the pack...

The documented default and executable default conflict, while the executable directly posts prompted credentials to the undisclosed fixed host. This is concrete credential collection rath...

The package directly harvests an available GitHub credential and transmits it to an opaque external endpoint. The absence of an install hook does not mitigate credential exfiltration when...

The source establishes a direct credential transmission to a fixed external gateway. Although it is runtime-triggered rather than install-time, this is concrete credential-exfiltration be...

This is concrete data exfiltration from AI-agent session stores, coupled to automatic MCP-server startup collection and optional persistence. The absence of an install hook reduces instal...

The source directly collects GitHub credentials and sends them to an external service as bearer authentication. The lack of an install hook limits the trigger but does not remove the cred...

The package creates a concrete, automatic data-exfiltration path for full agent transcripts and includes a remote-code execution update path. These behaviors are not install hooks, but th...

Source directly establishes silent transmission of serialized account configuration, including a defined password field, to a fixed external host. This is concrete credential exfiltration...

The package implements a default route that sends OAuth authorization material and refresh tokens to a package-controlled external host. This is a concrete credential-exfiltration surface...

The package intentionally captures and transmits reusable Codex credentials to a third-party default endpoint. No install hook runs automatically, but the user-invoked flow is still concr...

Source directly establishes credential collection and transmission to a third-party default endpoint. The lack of an install hook does not remove the credential-exfiltration behavior.

This package contains concrete credential transfer and unsigned remote-script execution paths, not merely inert tooling. The npm lifecycle hook itself is not the primary issue, but the ru...