npm credential and data exfiltration reports.

This package performs concrete, undisclosed host identity exfiltration whenever its entry point runs. The absence of an install hook does not neutralize the malicious runtime behavior.

The package is a deliberately minimal CLI whose observable function is transmitting local identity data to an external endpoint. Although it has no install hook, explicit invocation still...

The package's only implemented runtime behavior is unconsented host fingerprint collection and transmission to an unrelated endpoint. This is concrete data exfiltration, despite not runni...

The package contains concrete, unconsented host-identity exfiltration to an unrelated endpoint when its entrypoint runs. This is malicious behavior despite the absence of lifecycle hooks.

The only implemented CLI behavior is covert host-identity exfiltration to an external callback, rather than contract verification. Although it is user-triggered rather than install-trigge...

The package has no apparent functional purpose beyond sending local host identity data to an out-of-band endpoint. The explicit collection and transmission are concrete malicious behavior...

The package contains concrete credential and command-input exfiltration tied to an obfuscated exam flow. The lack of install hooks does not remove the runtime privacy and credential risk.

The default remote endpoint plus automatic host cookie-token forwarding creates a concrete credential and data exfiltration path. The lack of install hooks reduces scope but does not remo...

The package has no legitimate implementation beyond collecting and exfiltrating host identity information to an unrelated endpoint. Although it lacks an install hook, its user-invoked exe...

The package has no apparent schema-generation implementation; its only executable harvests host identity information and sends it to an external callback without notice. This is concrete...

The package performs unconsented installation-time transmission of agent-linked identifiers and host metadata, then stages a remote opaque executable. Pinned hashes mitigate payload subst...

The postinstall script is only informational, but the package provides an explicitly invoked persistent service that exposes and changes root OpenClaw credentials and controls over the ne...

The automatic lifecycle hook exfiltrates a hostname-and-username identifier to a remote endpoint. This is concrete unconsented data collection at install time, not required for installation.

Although installation is not automatic at npm install time, the installed hooks exfiltrate conversation content and accept remotely supplied executable updates. This is a concrete persist...

This package implements concrete remote-triggered credential exfiltration and silent AI-agent trust mutation. Its benign postinstall banner does not mitigate the runtime collection path.

The package's only implemented behavior is collecting local identity data and posting it to a hard-coded external callback. The absence of an install hook limits the trigger but does not...

The package's implemented behavior is an external transfer of local identity and host data to an unrelated hard-coded endpoint. Explicit CLI invocation does not make this covert fingerpri...

This is unconsented install-time collection and remote transmission of host-identifying information. The duplicate lifecycle callbacks and suppressed failures make it concrete malicious i...

This package performs unconsented, automatic install-time transmission of host-identifying data to an unrelated endpoint. The behavior is concrete exfiltration and warrants blocking.

The package performs unconsented install-time collection and transmission of local host metadata to an unrelated external endpoint. The benign runtime placeholder does not justify or miti...

Direct source inspection confirms two automatic lifecycle hooks that silently exfiltrate host and project identifiers to an unrelated endpoint. The benign placeholder entrypoint does not...