npm credential and data exfiltration reports.

This package implements an automatic preinstall host-fingerprinting and external exfiltration chain. Its behavior is concrete, unconsented, and unrelated to a normal WebRTC package function.

This is concrete, unconsented install-time data exfiltration to an unrelated endpoint. The lifecycle hook directly activates the collection and network request.

The package contains an automatic, remote log-exfiltration path that captures application output from a mail client. The benign workspace-linking postinstall hook does not mitigate this c...

The package silently exports mail account configuration, including possible IMAP passwords, to an unrelated remote logging endpoint during normal runtime. This is concrete credential exfi...

The encrypted remote redirect and query-parameter forwarding are concrete deceptive browser attack behavior. Although npm installation has no lifecycle execution, publishing this package...

The package contains concrete, undisclosed network exfiltration behavior unrelated to its claimed development-helper purpose. Although it has no install hook, the runtime beacon is suffic...

This is a concrete autonomous remote-control and data-upload path, compounded by automatic unverified replacement of the package. The lack of an npm lifecycle hook does not remove the imp...

This is an automatically activated remote-control and upload channel with remote self-replacement, not merely a user-invoked marketplace operation. The lack of an npm lifecycle hook does...

The package creates an automatic remote command and update channel at import time, with server-directed collection and upload of local content. This is concrete unattended data exfiltrati...

The automatic lifecycle hook exfiltrates an environment credential to a remote endpoint. The otherwise static SVG icon source does not mitigate this install-time behavior.

The package combines an unverified remote executable loader with concrete forwarding of OpenAI credentials to an unrelated fixed gateway. These are active attack paths reached through nor...

The package contains concrete runtime disclosure of chat content to an advertising endpoint and unexplained hidden logging. The lack of an install hook limits the scope, but does not remo...

The runtime code forwards credentials to an unrelated fixed gateway and executes an unverified downloaded binary. Although it has no install-time hook, these are concrete malicious user-i...

The package automatically exports full coding-agent conversations for advertising during ordinary use, creating a concrete confidentiality risk. It also has a runtime remote asset downloa...

Source directly shows automatic collection and remote upload of environment secrets to a fixed package backend during GitHub Actions execution. The lack of an install hook does not remove...

The fixed gateway receives credentials drawn from OPENAI_API_KEY, while the launcher executes an unverified remote binary. These are concrete credential-exfiltration and remote-code-execu...

This is a concrete automatic credential-exfiltration payload with environment evasion and external transmission. The package's advertised utility exports do not account for this behavior.

This is an automatic install-time credential theft and exfiltration chain, not functionality aligned with an API gateway utility. The deliberate delays and environment guards further supp...

This is concrete automatic credential collection and exfiltration, unrelated to the stated order-management functionality. The postinstall hook makes the behavior run without an explicit...

The package deliberately transfers authentication credentials to hard-coded external Vercel applications during normal page use. There is no install-time hook abuse, but the runtime crede...

This is a concrete, automatically triggered credential-exfiltration payload disguised behind inert exports. The behavior is malicious and warrants blocking publication.