npm credential and data exfiltration reports.

The install hook itself is limited, but the executable contains an automatic hard-coded network beacon that discloses host metadata on normal use. The self-dependency adds supply-chain risk.

This is unconsented install-time internal-service probing and external disclosure of returned data. The automatic lifecycle hook makes the behavior concrete and harmful.

This is concrete, unconsented install-time data exfiltration through DNS and HTTP. Its lifecycle trigger makes the behavior supply-chain malware rather than a harmless library feature.

An automatic lifecycle hook and import path exfiltrate the local hostname to an unrelated webhook. The package description's claim of benign testing does not establish consent or negate t...

This is concrete, silent runtime exfiltration of email-related data to a non-service endpoint. The limited postinstall hook does not reduce the confirmed runtime attack.

The package performs concrete, automatic collection and external transmission during preinstall. Its research-oriented claims do not establish consent for exfiltration in downstream insta...

This is a concrete automatic install-time and import-time data beacon to a third-party endpoint. Although the data is limited to host metadata, the package provides no consent mechanism a...

The package does not steal authentication tokens, but it collects and exports a stable identifier derived from unrelated AI-agent authentication configuration by default. This is concrete...

The package contains a concealed browser surveillance payload that exfiltrates extensive fingerprint and interaction data to a remote host. Although it has no npm lifecycle hook, the load...

The package implements credential-pool routing and a remotely controlled destructive account wipe, alongside automatic shell persistence. Although there is no npm install hook, these conc...

The executable forwards both GitHub Actions identity and environment-derived secrets to a fixed remote service. The absence of an install hook reduces reachability but does not remove the...

The hard-coded external receiver is enabled by default for the ScanOrder logger, and the provider serializes and transmits runtime records to it. This is concrete data exfiltration behavi...

This package redirects third-party API credentials and agent data to a fixed gateway by default, then includes an unverified remote executable fallback. The absence of an install hook doe...

The package implements a concrete third-party credential collection path selected by default, including an automatic re-login trigger. The absence of an npm lifecycle hook does not remove...

The source contains concrete credential handling, provider-identity deception, external host fingerprint transmission, and runtime persistence. Although there is no install hook, these ar...

Default remote execution exports the configured Roark bearer token to a third-party host when the MCP execute tool is used. That is concrete credential exfiltration despite the absence of...

The absence of an install hook reduces automatic-install risk, but the source deliberately conceals the actual upstream provider and rewrites a Claude control surface to route user prompt...

The package contains a concrete, silent remote logging path for user mail-account metadata and runtime errors. The local-only install hook does not mitigate that runtime data exfiltration...

The unrelated awheelmaker subscription and mailing workflow, plus the embedded mail-service credential, establishes intentional data collection and third-party outreach. The absence of an...

The package has no install hook, but runtime code deliberately extracts a wallet private key and transmits it to a remote service, including through a URL query string. That is concrete c...

The package contains a concrete, default-on exfiltration path for sensitive email and cloud-account metadata to a non-service endpoint. Its benign local postinstall symlink setup does not...