npm credential and data exfiltration reports.

The source directly sends serialized IMAP configuration, including a possible password field, to an external logging endpoint during normal runtime initialization. This is concrete creden...

The source implements a default credential-forwarding path to a third-party endpoint during normal tool use. The explicit option does not remove the default external disclosure.

The package silently sends mail-account metadata to an unrelated endpoint during ordinary runtime. No install hook is involved, but the confirmed default data disclosure is concrete malic...

The package contains credential-linked command telemetry and AI-tool inventory collection, concealed behind a heavily obfuscated exam command. These behaviors create a concrete data-exfil...

The package contains a concrete credential-collection and transmission path to a fixed IP with certificate verification disabled. The lack of an install hook does not neutralize the user-...

The hard-coded default external API host and automatic forwarding of a consumer access token form a concrete runtime credential-exfiltration path. The absence of lifecycle hooks limits th...

The default external endpoint, cookie-token forwarding, and administrative POST operations form a concrete exfiltration path unrelated to the declared package presentation. There is no in...

The source establishes a credential collection and forwarding chain involving a GitLab-hosted login page and opaque default service endpoints. Lack of install hooks reduces automatic impa...

This package performs unconsented sensitive-file collection and disclosure during an automatic install hook. The absence of a real network request limits the observed scope but does not m...

The package performs concrete credential collection and transmission automatically after pairing, without a separate user confirmation. Its benign postinstall message does not mitigate th...

The package contains concrete credential exfiltration to an unrelated fixed host and automatic consumer-project dependency installation enabled by default. These behaviors are reachable t...

The package embeds an unrelated third-party subscription and account-email workflow in its server bundle. This is concrete data collection and external communication unrelated to the decl...

The default runtime path forwards an API credential and arbitrary upstream environment values to an external endpoint. This is concrete credential exfiltration behavior, despite requiring...

The shipped entrypoint captures and persists an API key, then sends it to an undocumented alternate domain. The lack of an install hook does not remove this concrete credential-exfiltrati...

The fixed third-party credential receiver and automatic npm installation are concrete harmful runtime behaviors, not required for a normal direct Facebook login client. The absence of ins...

The package contains an automatically seeded credential-interception payload that captures Claude Authorization headers while weakening TLS verification. Its benign postinstall hook does...

The package embeds active third-party webhook destinations and automatically forwards broad runtime logs to them. The absence of an installation hook limits the trigger to runtime but doe...

This is concrete credential disclosure through package-controlled default routing, not merely ordinary network use. No install hook is needed because importing and using the browser compo...

The package contains concrete runtime credential collection and transmission to external hosts, plus an automatic install-time npx invocation. The provider is automatically enabled based...

The package is a persistent telemetry agent that transmits local configuration content and cloud identity data after wiring itself into AI-agent hooks. The absence of an automatic npm lif...

The package has a concrete automatic install-time credential-transmission path. Static icon exports do not mitigate that lifecycle behavior.