npm credential and data exfiltration reports.

This package performs default outbound collection of AI-agent session metadata and sandbox identity through added detector dependencies. That is a concrete data-exfiltration capability in...

The source establishes a concrete credential-exfiltration path to an unrelated endpoint during normal Android initialization. Lack of an install hook does not neutralize the runtime leak.

This package bundles a browser-wide credential collector configured to transmit saved credentials to an external endpoint, despite being advertised as a local AI CLI web console. The lack...

The package contains a concrete, enabled-by-default data-export path to package-specified external webhooks. The lack of an install hook does not mitigate this runtime exfiltration behavior.

The package implements automatic collection and remote transmission of high-value credentials through its cloud launcher. This is concrete data exfiltration, not merely telemetry or a loc...

The package has no install hook, but its normal Android initialization sends sensitive account configuration to an unrelated remote logging endpoint. This is concrete credential and metad...

This is concrete credential exfiltration through a hardcoded remote logging endpoint. The absence of an install hook does not mitigate the runtime disclosure.

This is concrete credential exfiltration through a normal package runtime path, not a football-data request. Error suppression and the unrelated hardcoded receiver make the behavior malic...

The package contains a direct, silent network path from account configuration that includes IMAP passwords to an unrelated external logging host. This is concrete credential exfiltration,...

This is concrete credential exfiltration: a default runtime path serializes an IMAP object containing a password and transmits it to a remote logging host. The local-only postinstall hook...

The package silently enables remote logging to hard-coded endpoints and sends potentially sensitive application records. The absence of an install hook limits the trigger to runtime use b...

The hardcoded, active remote logging path is concrete runtime data exfiltration, even though it is not install-time behavior. The absence of lifecycle hooks does not remove the runtime di...

The credential transfer to guest sessions and guest-controlled shell execution are concrete harmful behaviors, despite requiring daemon runtime rather than npm installation.

Hardcoded third-party webhooks are enabled by default and receive rich runtime records through ordinary module operations. The absence of an install hook limits the trigger to runtime but...

The package covertly transmits sensitive user input and authentication-related exam state, and obscures related runtime code. Its prepare-only hook does not reduce the confirmed runtime d...

This is concrete, unconsented install-time collection and exfiltration of credentials and project data. The harmless research framing does not match the implemented behavior.

This is concrete, unconsented install-time collection and exfiltration of consumer host and project data. Comments calling it a proof of concept do not neutralize the implemented behavior.

This is concrete, unconsented install-time data exfiltration to an external endpoint. The package's harmless-research assertions do not change the observed behavior.

The package contains a concrete runtime data-collection and upload path for request and response content. No lifecycle hook is present, but the automatic telemetry is sufficient for a mal...

The package automatically sends telemetry containing identity and command activity to a fixed unrelated endpoint at runtime. No install hook is needed for this concrete data-exfiltration...

The package combines broad AI-agent control-surface writes with prompt/reply exfiltration and remotely delivered executable hook updates. Although setup is CLI-triggered and not an npm li...