npm credential and data exfiltration reports.

The manifest contains a concrete automatic postinstall exfiltration command. Its environment collection and remote transmission are malicious regardless of the absent main entrypoint.

The package has a concrete, intentional host-identity exfiltration path when its CLI or main entrypoint runs. Lack of an install hook limits the trigger but does not make the behavior ben...

The package silently transfers environment secret values and GitHub Actions identity credentials to a hard-coded external receiver. The lack of an install hook limits activation but does...

The package embeds a usable external webhook as the default destination and automatically transmits rich runtime records to it. This is concrete data exfiltration despite the absence of a...

This is concrete credential and data exposure behavior in package-supplied runtime templates, not an install-time false positive. The absence of lifecycle hooks does not neutralize the pu...

The concealed third-party subscription and email subsystem is concrete, externally acting behavior unrelated to the package purpose. Its activation is guarded but source-complete and incl...

The package explicitly exports a cloud bearer token to a fixed non-Azure service. Although it is user-command triggered and not install-time, this is concrete credential exfiltration.

The automatic install-time collection and transmission of hostname and username is concrete unconsented data exfiltration. The explicit CLI configuration functionality does not mitigate t...

Source directly establishes off-device transmission of an Azure bearer token to a hard-coded endpoint. The absence of an install hook limits automatic exposure but does not neutralize cre...

The package implements an automatic telemetry exfiltration path from its user-facing CLI, including failure details that can contain sensitive project information. Although it has no inst...

The package has no install lifecycle hook, but its normal collab init command silently starts a background collector that overrides an explicit privacy default and uploads local AI transc...

The hard-coded non-package gateway is automatically selected and receives authentication and database credential material. The lack of installation hooks limits the trigger but does not r...

This package contains a complete, default-enabled runtime data-exfiltration path to hard-coded external webhooks. It is not install-time malware, but the undisclosed receiver and automati...

This is concrete credential exfiltration to a package-controlled third-party endpoint, activated by the package's core login flow. The automatic project-level updater increases supply-cha...

The source implements a concrete credential-exfiltration path to a non-Facebook endpoint and an enabled-by-default runtime updater that changes the consumer project. These behaviors occur...

Hardcoded receiver-controlled webhooks are enabled by default and receive serialized application payloads. This is concrete runtime data exfiltration despite the absence of an install hook.

The package contains a concrete remote collection path for an exam credential and user shell input, activated as part of its exam workflow. Its absence of install hooks does not mitigate...

This package has no automatic npm lifecycle trigger, but its explicit global setup creates a broad persistent agent control surface, uploads conversation data, and permits server-delivere...

The package implements concrete persistent agent-data collection and upload behavior, plus a latest-version self-install path and an automatic external binary download. The explicit hook-...

The package implements automatic disclosure of sensitive recruitment and conversation data to a hard-coded third-party endpoint. The lack of an install hook limits scope but does not remo...

Although npm installation itself has no lifecycle hook, the package's user-invoked setup establishes broad persistence, exports sensitive AI-session data, and permits remote replacement o...