npm credential and data exfiltration reports.

The default remote endpoint, all-site extension access, and credential upload form a concrete credential-exfiltration path. The broad local AI credential discovery adds further sensitive-...

This is concrete, unconsented install-time host profiling and exfiltration to an unrelated external endpoint. The automatic lifecycle trigger and identity-command collection make the pack...

This is an automatic install-time host and identity-data exfiltration path with no package functionality that requires it. The empty runtime module does not justify the lifecycle behavior.

This is concrete, unconsented install-time system profiling and data exfiltration to an unrelated hard-coded endpoint. The empty runtime export does not justify the lifecycle behavior.

This is concrete, unconsented install-time collection and exfiltration of local host and account identity data. The lifecycle trigger and outbound HTTP behavior establish a malicious supp...

This is unconsented install-time collection and exfiltration of host and user identity data to an unrelated external IP address. The empty runtime module provides no legitimate package fu...

The source directly transmits BYOK credentials to a fixed non-provider endpoint. The absence of install hooks limits the trigger but does not remove the credential-exfiltration behavior.

The hardcoded external logging endpoint receives serialized account configuration during normal initialization, including fields capable of holding IMAP passwords. This is concrete data e...

The shipped runtime contains a complete automatic path from account loading to silent third-party transmission of account metadata. This is concrete unconsented data exfiltration, not req...

Source directly establishes automatic transmission of sensitive mail-account configuration to an external host. The limited workspace-only postinstall hook does not mitigate the runtime c...

Source establishes a concrete, automatic external data-exfiltration path for account metadata and broad console content. The benign workspace-only postinstall hook does not mitigate the r...

Source directly establishes runtime transmission of user account metadata to a non-mail-provider endpoint. The benign workspace-only postinstall hook does not mitigate this concrete data-...

The package performs unconsented install-time host reconnaissance and external transmission. Its canary description does not remove the concrete data-exfiltration behavior.

The package deliberately detects AI-agent and sandbox context and transmits it by default during normal CLI use. Although there is no lifecycle hook, this undisclosed collection is a conc...

The source directly implements credential collection and transfer to a non-GitHub service. The lack of an install hook limits the trigger but does not remove the credential-exfiltration b...

Source inspection confirms automatic upload of agent transcripts and credential metadata to server-directed endpoints during normal runtime. This is concrete data exfiltration behavior, n...

This is a concrete credential-exfiltration path: a password-bearing account object is serialized into a remote logging request. The lack of npm lifecycle hooks does not mitigate the runti...

The package contains an undisclosed runtime exfiltration path to a non-service host for broad console and account-sync telemetry. Although its postinstall hook is benign, the runtime data...

Source inspection confirms a broad agent-hook collection and upload path to a fixed HTTP IP with bearer authentication. The lack of an npm lifecycle hook reduces automatic-install risk bu...

This is not a passive connector: it combines remote terminal observation and prompt injection with default permission bypass and persistent changes to a broad AI-agent control surface. Th...

The package contains concrete runtime redirection of model traffic and embedded obfuscated credentials, not merely optional user-supplied networking. Its benign node-pty postinstall hook...