npm credential and data exfiltration reports.

The package combines automatic installation and self-updating with broad credential collection and remote upload. The cloud command is user-invoked, but its default snapshot behavior expo...

The source implements concrete runtime credential disclosure to two hard-coded external receivers, not merely ordinary analytics. No install-time behavior is needed for the credential-exf...

The package contains a concrete runtime credential-exfiltration path to a hard-coded third-party host. The absence of an install hook does not mitigate this behavior when the Android boot...

The package contains a concrete credential-exfiltration path, despite having no npm lifecycle hook. The logging endpoint is unrelated to the mail providers and receives serialized account...

The source establishes automatic transmission of broadly captured application logs to a package-controlled endpoint, including sensitive mail-account metadata. The lifecycle hook is not i...

The package implements automatic, silent exfiltration of application logs to an unrelated endpoint, and those logs demonstrably include mail and account data. The workspace-only postinsta...

The package contains a concrete, automatic data-exfiltration path to a package-controlled host. Its narrow postinstall hook does not remove the runtime privacy and credential-context risk.

The package contains an always-on remote logging channel that captures console output and explicitly transmits account metadata to an external host. The install hook is limited, but it do...

The package collects a GitHub credential and transmits it to a hard-coded remote endpoint. The absence of install hooks limits the trigger but does not neutralize credential exfiltration...

The package collects a reusable GitHub credential and transmits it to a non-GitHub endpoint. The absence of lifecycle hooks reduces installation risk but does not remove the credential-ex...

The package transmits raw GitHub credentials to a hard-coded external service, not merely to GitHub's API. This creates a credential-exfiltration capability whenever authenticated CLI fun...

The source directly collects GitHub credentials and transmits them to a hard-coded external endpoint. The absence of an install hook limits the trigger but does not remove the credential-...

The source directly transfers a GitHub credential to an opaque remote endpoint. Although the package is a user-invoked CLI and lacks install hooks, this is concrete credential exfiltratio...

The hard-coded authenticated external requests contradict the stated configurable-parent-API design and create a concrete exfiltration surface. The absence of install hooks does not mitig...

This is concrete, automatic exfiltration of AI-agent conversation data, not merely an explicit upload feature. The lack of an install-time hook does not remove the runtime privacy impact.

The package automatically reads and transmits an environment credential during preinstall. Its licence-check framing does not remove the unconsented install-time credential disclosure.

This is concrete credential exfiltration and credential replacement functionality aimed at OpenAI Codex accounts. The lack of an install hook limits automatic execution but does not make...

This package implements a concrete third-party collection and transmission path for complete Codex credentials. The lack of automatic lifecycle execution reduces stealth but does not remo...

Source directly shows the capture and remote upload of reusable credentials to third-party endpoints. The absence of an install hook does not remove this credential-exfiltration behavior.

This is a concrete credential-exfiltration path to a hard-coded external host, hidden inside a package presented as a local CLI web console. The lack of an npm lifecycle hook does not rem...

The package contains a reachable automatic credential-exfiltration path to a fixed unrelated host. No install hook is needed for this runtime behavior to be malicious.