npm credential and data exfiltration reports.

The package combines API-credential forwarding to a nonstandard endpoint with blind signing of endpoint-controlled transactions. This creates a concrete credential-exfiltration and wallet...

The package combines deceptive remote executable delivery with a default route that forwards OpenAI credentials to an unrelated service. This is concrete credential-exfiltration behavior...

The package contains a concrete automatic secret-upload path to a fixed external endpoint during CI runtime. Lack of an npm install hook reduces the trigger scope but does not neutralize...

The package redirects credentials intended for OpenAI to a different fixed gateway and executes an unverified remote binary. These are concrete malicious behaviors despite the lack of an...

The source directly establishes forwarding of OpenAI credentials to a fixed gateway and execution of an unchecked downloaded binary. The lack of an install hook limits automatic spread bu...

The package performs concrete, default-on exfiltration of identifiers derived from unrelated AI-agent authentication files to a third party. Hashing reduces direct disclosure but does not...

The package automatically reads identifiers from AI authentication files and transmits a derived persistent identifier to an external telemetry service. The absence of an install hook doe...

This package contains a user-triggered unsigned remote-code loader and forwards OpenAI credentials to a fixed non-OpenAI gateway. The lack of an install hook limits automatic exposure but...

The default use of an OpenAI credential with a fixed unrelated gateway establishes concrete credential exfiltration on normal CLI use. The unverified remote executable path adds a second...

The default routing of an OpenAI credential to a fixed third-party gateway is concrete credential exfiltration. The unchecked executable download compounds the risk despite no automatic i...

The package performs unconsented install-time collection and remote transmission of hostname-and-username data, with local tracking persistence. Explicit CLI MCP setup does not mitigate t...

This release contains reachable, active attack and secret-extraction functionality without target authorization enforcement. The automatic install hook is limited to its own configuration...

This package has no automatic npm lifecycle trigger, but its explicit global setup creates broad AI-agent hooks that transmit user and tool data and later self-update from a remote servic...

The package contains agent-directed secret-disclosure instructions and executes an unpinned latest self-release at runtime. The absence of an install hook reduces automatic-install risk b...

The automatic external transmission of full request URLs and errors is a concrete data-exfiltration behavior. The absence of install hooks limits scope but does not neutralize this runtim...

The embedded default telemetry destination can receive rich application records without a consumer-provided endpoint. This is concrete runtime data exfiltration, and the remote script loa...

The lifecycle hook performs unconsented collection and attempted network transmission of sensitive installation-host data. This is concrete install-time credential and system-information...

The install hook performs concealed, automatic host-data exfiltration. The UI source does not mitigate this independent lifecycle attack.

The package contains a lifecycle-triggered collection-and-transmission command with no legitimate package functionality supporting it. This is concrete malicious install-hook behavior.

The package's sole substantive behavior is an automatic lifecycle hook that harvests environment and network data and sends it over the network. This is concrete credential and system-inf...

The published runtime artifact establishes a default external logging path that transmits broad application records to hard-coded endpoints. The lack of an install hook does not mitigate...