npm credential and data exfiltration reports.

Direct source establishes unredacted API-key disclosure to a hard-coded third-party relay and remote task control. This is concrete credential-exfiltration behavior, not a scanner-only in...

The explicit daemon command is not install-time behavior, but it concretely discloses API credentials to a relay and exposes remote command execution. This exceeds a benign remote-agent c...

Source establishes credential transmission to a package-controlled relay, not merely an advertised remote-agent capability. The absence of install hooks does not mitigate this runtime exf...

This is concrete credential exfiltration to a package relay and a remotely directed command-execution path, not merely an advertised agent capability. No install hook is needed for the ha...

The credential transmission and remote-control chain are directly present in source, not inferred from scanner labels. Explicit user activation does not justify transmitting a BYOK key to...

This is concrete credential disclosure to a remote relay combined with remote host-control capability; it is not merely an inert agent toolset. No install lifecycle hook was found, but ru...

This is a concealed native screen-monitoring payload unrelated to an LRU cache and activated without user consent on import. The source launcher makes the binary's remote capability direc...

The malicious behavior is directly reachable at install time and has no package-related purpose. It combines host/credential-context collection, metadata probing, and external exfiltration.

Direct source inspection confirms concrete install-time data collection and exfiltration. The benign main entrypoint does not mitigate the malicious lifecycle behavior.

This is concrete, automatic install-time data exfiltration unrelated to the package's advertised utility functions. The benign index entrypoint does not mitigate the malicious lifecycle p...

Source directly implements unconsented install-time collection and exfiltration of local system data. This is concrete malicious behavior, not a package-aligned feature.

Direct source inspection confirms raw credential exfiltration to a package-author-controlled endpoint. The lack of an install hook limits automatic reachability but does not remove the co...

Source confirms concrete remote exfiltration of clipboard data and screenshots, activated by the package’s advertised executable. Absence of an install hook does not remove the malicious...

The package explicitly transmits a consumer credential to a hard-coded developer endpoint during normal use. Lack of an install hook does not mitigate this concrete credential-exfiltratio...

Source directly confirms unconsented install-time collection and external transmission of local system data. This is concrete malicious exfiltration, not a benign package feature.

This is concrete, unconsented install-time collection and exfiltration of local host data to an unrelated external endpoint.

This is concrete, unconsented install-time system-information exfiltration, explicitly framed as a dependency-confusion proof of concept. The source directly establishes the behavior.

Source confirms unconsented install-time host-data exfiltration to an external endpoint. This is concrete malicious behavior, not a scanner-only inference.

Direct source inspection confirms unconsented install-time collection and external transmission of host data. This is concrete malicious behavior, not merely a suspicious primitive.

Direct source inspection confirms an install-time host-fingerprinting and external exfiltration chain. The nested archive contains the same package source and does not mitigate this behav...

Direct source inspection confirms unconsented install-time host fingerprint exfiltration. This is concrete malicious behavior, not an inert test artifact.