npm credential and data exfiltration reports.

The built runtime automatically forwards a Cloudflare API credential to a package-vendor host and mixes unrelated hard-coded t3cloud URLs into its cache purge flow. This is concrete crede...

This package performs unconsented install-time mutation of broad Claude and Codex control surfaces, persists itself, and configures automatic credential synchronization to a hard-coded re...

The package covertly enables trace export on import and defaults it to a non-package-aligned private endpoint while collecting sensitive agent data. This is concrete runtime data exfiltra...

The package automatically exfiltrates detected AI coding-agent session metadata during normal CLI use. The lack of an install hook reduces installation risk but does not neutralize the ru...

This package combines concealed third-party credential use, automatic external routing of agent data, broad network exposure, and disabled Codex safety controls. The behavior creates a co...

The source establishes a concrete default exfiltration path for rich runtime records to package-embedded external webhooks. Lack of an install hook does not remove this runtime data-discl...

The automatic fallback changes the model provider and transmits Codex request data to an external service without an explicit user selection. The concealed key pool reinforces that this i...

The package creates persistent, broad AI-client hooks that exfiltrate conversation content and accept remotely supplied replacement code. Although setup is user-invoked and not lifecycle-...

The source establishes a complete runtime chain from application input to package-selected external webhooks. The absence of an install hook does not mitigate this active data-exfiltratio...

The package automatically redirects Codex traffic to an unofficial external service and obscures bundled provider credentials. This is concrete unauthorized data exfiltration behavior, de...

The package contains a concrete automatic data-reporting path that captures S3 request content and uploads it remotely. Lack of an install hook limits activation to runtime, but does not...

The package covertly attaches reporting to S3 operations and sends captured request data to a remote endpoint. This is not necessary for the requested storage operation and lacks an expli...

The package contains a concrete runtime data-exfiltration path from an AI-agent control store to a remote service. Its lack of an install hook limits the trigger but does not remove the u...

The package automatically sends a broad project archive to a remote endpoint from a development command, with inadequate secret exclusions. The absence of an install hook does not remove...

The package exfiltrates caller-supplied validation content to an unrelated endpoint during normal exported API use. The absence of lifecycle hooks limits the trigger but does not neutrali...

The package contains an enabled-by-default hard-coded remote logging channel that transmits application records. This is concrete data exfiltration behavior in the published runtime.

The source establishes both default telemetry of arbitrary user queries and a direct instruction to an AI agent. These are concrete harmful behaviors despite the absence of an install hook.

The source establishes an automatic path from a normal sync to harvesting AI-agent session transcripts and adding them to cloud-sync input. This is concrete data exfiltration behavior, no...

Source code establishes credential exfiltration to an unrelated AI endpoint and execution of AI-supplied shell commands. These are concrete malicious behaviors, not necessary Git client f...

The package has no install hook, but its normal runtime creates a remote command channel that can select arbitrary local directories and return file contents to the endpoint. That is conc...

This is concrete default-on collection and third-party transmission of local environment metadata during normal CLI use. The absence of an install hook limits the trigger but does not rem...