npm credential and data exfiltration reports.

The package directly exfiltrates a wallet private key during ordinary SDK operations. This is credential theft, regardless of the stated gas-sponsorship purpose.

This is an unconsented install-time data-exfiltration payload. The automatic lifecycle trigger, local account reconnaissance, and fixed external POST establish concrete malicious behavior.

The source establishes a default-on remote transmission of an authentication token and user-associated telemetry, not merely an inert network primitive. No lifecycle hook is needed for th...

The source establishes a concrete prompt and project-metadata exfiltration path through automatic configuration and broad Claude Code hooks. The package-local postinstall does not offset...

The bundled all-sites credential collector defaults to transmitting saved logins to an external domain, creating a concrete credential-exfiltration path. The lack of an npm install hook d...

The package contains a complete, automatically invoked path that fingerprints coding-agent and sandbox environments and transmits the resulting identifiers. Although it has no install hoo...

The package contains a concrete default credential-forwarding path to an external Research MCP endpoint. The absence of an npm lifecycle hook does not mitigate this runtime credential exf...

Source directly connects account configuration containing an optional password to an external logging endpoint. The lifecycle hook is not the exfiltration mechanism, but it does execute a...

The package sends serialized IMAP account data to an unrelated external logging endpoint during normal runtime, and that data structure includes a password. This is concrete credential ex...

The package embeds automatic, hardcoded third-party telemetry in a UI component and exports embedding-site metadata when the component is used. This is concrete runtime data exfiltration...

The fixed, unofficial trace destination and credential-bearing POST create a concrete data-exfiltration path inconsistent with a general agent library. Lack of an install hook limits the...

The fixed private collector and disguised OpenAI tracing configuration create a concrete, undisclosed data-exfiltration path. The lack of lifecycle execution limits the trigger but does n...

The default runtime path exports credentials and arbitrary submitted code to a remote endpoint. The lack of install hooks does not mitigate this active credential-exfiltration behavior.

This package includes a browser credential collector whose default destination is an external host, not its local CLI server. Although npm installation has no automatic install hook and c...

Source inspection confirms unconsented collection and external transmission of local identity and host-fingerprint data during normal package use. The absence of an install hook does not...

The hidden runtime import activates an obfuscated network interceptor and fingerprinting self-update daemon, beyond the documented API-client behavior. The absence of an install hook does...

This is an automatic install-time data-exfiltration payload with no package functionality beyond collection and transmission. The hardcoded external receiver and sensitive local-file read...

The automatic archive-and-upload path is concrete and can disclose unexcluded project secrets to a remote service. The lack of an install hook limits the trigger, but does not remove the...

Source establishes automatic external transmission of local identity and project metadata during normal tool use. No install hook is present, but the confirmed data exfiltration is suffic...

Direct source inspection confirms a normal-runtime, default-configured outbound logging path to active external webhooks. The absence of install hooks does not mitigate this concrete appl...

The package performs unconsented postinstall environment collection, internal metadata probing, persistence, and third-party reporting. Its self-description does not neutralize these conc...