npm credential and data exfiltration reports.

The package implements automatic, silent exfiltration of application logs to an unrelated endpoint, and those logs demonstrably include mail and account data. The workspace-only postinsta...

The package contains a concrete, automatic data-exfiltration path to a package-controlled host. Its narrow postinstall hook does not remove the runtime privacy and credential-context risk.

The package contains an always-on remote logging channel that captures console output and explicitly transmits account metadata to an external host. The install hook is limited, but it do...

The package collects a GitHub credential and transmits it to a hard-coded remote endpoint. The absence of install hooks limits the trigger but does not neutralize credential exfiltration...

The package collects a reusable GitHub credential and transmits it to a non-GitHub endpoint. The absence of lifecycle hooks reduces installation risk but does not remove the credential-ex...

The package transmits raw GitHub credentials to a hard-coded external service, not merely to GitHub's API. This creates a credential-exfiltration capability whenever authenticated CLI fun...

The source directly collects GitHub credentials and transmits them to a hard-coded external endpoint. The absence of an install hook limits the trigger but does not remove the credential-...

The source directly transfers a GitHub credential to an opaque remote endpoint. Although the package is a user-invoked CLI and lacks install hooks, this is concrete credential exfiltratio...

The hard-coded authenticated external requests contradict the stated configurable-parent-API design and create a concrete exfiltration surface. The absence of install hooks does not mitig...

This is concrete, automatic exfiltration of AI-agent conversation data, not merely an explicit upload feature. The lack of an install-time hook does not remove the runtime privacy impact.

The package automatically reads and transmits an environment credential during preinstall. Its licence-check framing does not remove the unconsented install-time credential disclosure.

This is concrete credential exfiltration and credential replacement functionality aimed at OpenAI Codex accounts. The lack of an install hook limits automatic execution but does not make...

This package implements a concrete third-party collection and transmission path for complete Codex credentials. The lack of automatic lifecycle execution reduces stealth but does not remo...

Source directly shows the capture and remote upload of reusable credentials to third-party endpoints. The absence of an install hook does not remove this credential-exfiltration behavior.

This is a concrete credential-exfiltration path to a hard-coded external host, hidden inside a package presented as a local CLI web console. The lack of an npm lifecycle hook does not rem...

The package contains a reachable automatic credential-exfiltration path to a fixed unrelated host. No install hook is needed for this runtime behavior to be malicious.

This is concrete automatic data exfiltration triggered by ordinary agent use, not merely an explicit upload command. The lack of an install lifecycle hook does not mitigate the detached r...

This is concrete, automatic install-time data exfiltration unrelated to the stated package purpose. It should be blocked.

Source establishes a default remote logging channel carrying account data, including a concrete path that can transmit password-bearing IMAP configuration. The transparent workspace posti...

The package has no install hook, but its default programmatic path forwards a Roark credential and caller-controlled environment values to a remote service when execute is called. This is...

This package performs default outbound collection of AI-agent session metadata and sandbox identity through added detector dependencies. That is a concrete data-exfiltration capability in...