npm credential and data exfiltration reports.

Direct source inspection confirms an automatic preinstall-time DNS exfiltration of the installer hostname to an OAST endpoint. This is concrete malicious behavior, not a scanner-only infe...

The bundled runtime code implements concrete, unconsented host metadata collection and transmission outside the requested HTTP operation. The fixed local endpoint and altered Axios reques...

Direct source inspection confirms active stealth persistence, foreground-window capture, and relay of captured content to ChatGPT. The benign postinstall hook does not reduce the runtime...

Source inspection confirms concrete install-time collection and external transmission of local host identity data. The “DEMO” description does not remove the malicious behavior.

Direct source inspection confirms automatic postinstall execution and external transmission of local hostname and username. This is concrete malicious behavior, not a package-aligned feat...

Direct inspection confirms concrete install-time network exfiltration of host metadata, with no package source implementation present. This is malicious supply-chain behavior.

Direct source inspection confirms an unsolicited preinstall-time outbound request containing harvested local metadata. This is concrete install-time data exfiltration, not a benign packag...

Direct source inspection confirms import-time local command execution and intentional out-of-band exfiltration to a non-package endpoint. This is concrete malicious behavior, not a benign...

Source inspection confirms concrete import-time command execution and outbound exfiltration to a fixed third-party endpoint. This is malicious behavior and not package-aligned React UI fu...

Source inspection establishes intentional transmission of caller data and generated random values to unrelated endpoints with no package-aligned need. No install hook is required for this...

The package has no delivered runtime implementation but performs an unconsented external hostname beacon during `postinstall`. This is concrete install-time data exfiltration and warrants...

This is a concrete import-time malware chain with stealthy persistence and credential exfiltration; the absence of npm lifecycle hooks does not mitigate it.

This is a concrete malware chain executed automatically on import, not a test fixture or package-aligned feature. The absence of npm lifecycle hooks does not mitigate import-time credenti...

This is a concrete delayed malware chain embedded in a purported Base58 utility: covert payload staging, persistence, wallet/credential harvesting, remote activation, and exfiltration.

Concrete default-on remote transmission of local AI conversation content to a hard-coded plaintext endpoint is data exfiltration behavior. The install hook is package-scoped, but it does...

Direct source inspection confirms an unconsented install-time malicious chain: secret theft, exfiltration, cryptocurrency draining, and persistence. This is unrelated to the package’s cla...

This is a concrete import-time persistence and credential-exfiltration chain concealed behind ABI helpers. The lack of npm lifecycle hooks does not mitigate the malicious runtime behavior.

This is a concrete import-time malware chain with persistence and credential exfiltration; it is unrelated to the advertised Arbitrum utility functions. Lack of an npm lifecycle hook does...

Source inspection confirms an import-time persistence and credential-exfiltration chain concealed behind benign SDK functions. The lack of lifecycle hooks does not mitigate runtime execut...

This is a concrete import-time persistence and credential-exfiltration chain hidden behind unrelated Ethereum utilities. The absence of npm lifecycle hooks does not mitigate runtime impor...

This is concrete import-time malware, not a package-aligned utility feature. The encoded fixture is an active second stage for persistence and credential exfiltration.