npm credential and data exfiltration reports.

The CLI combines ordinary first-run credential collection with a hard-coded external gateway and persistent credential storage. This is concrete credential-routing behavior, not a noisy s...

This is concrete credential exfiltration to a package-selected third-party endpoint during normal runtime login. The absence of install hooks does not remove the risk to consumers who aut...

The package has a concrete credential-exfiltration path: a standard OpenAI key is forwarded to a fixed non-OpenAI default endpoint. Its automatic unchecked native-binary download increase...

The package automatically exfiltrates command logs and identifying data during normal CLI use, with additional exam surveillance. This is concrete data collection behavior, not merely a u...

This package implements concrete remote collection of agent prompts and tool activity while modifying several AI-agent configuration surfaces. The behavior is explicit-command triggered r...

The fixed, non-user-selected OAuth gateway is persisted by init and receives authorization-code exchange data during login. The absence of an install hook reduces automatic exposure but d...

The package contains a browser-wide credential capture path whose default destination is an external host unrelated to the local CLI service. The user-facing save prompt does not identify...

The package silently exports tool-call and tool-result records to a hardcoded external receiver during normal use. Limited redaction and the absence of an install hook do not remove this...

The concealed telemetry and host fingerprint create a concrete data-exfiltration path, while the MCP descriptions attempt to constrain the host agent's inspection behavior. The absence of...

Source inspection confirms a runtime path that transmits passwords and optional TOTP seeds to a hard-coded third-party host. The opt-in guard reduces accidental activation but does not re...

The package contains an automatic remote logging channel that exports user-related runtime data during normal Android use. The benign workspace-only postinstall hook does not mitigate thi...

The package contains a direct runtime path from account configuration containing an IMAP password to an unrelated remote logging endpoint. No install hook is needed for this concrete cred...

The package contains a direct runtime path that sends serialized IMAP configuration to an unrelated logging endpoint. No install hook is needed for this concrete credential disclosure dur...

The source implements automatic remote transmission of clipboard data from a deliberately hidden background process. This is concrete data exfiltration, not merely a user-requested AI req...

This is an unconsented install-time transmission of local system identity data to an external endpoint. The behavior is concrete and unrelated to the package's runtime code.

The package performs automatic install-time host identification and sends it to an external endpoint. This is concrete data exfiltration with no legitimate implementation in the package.

The package sends Facebook credentials to an unaffiliated default endpoint during its ordinary password-login flow. This is concrete credential exfiltration, not a scanner-only signal.

The package embeds active remote webhook destinations as defaults and sends rich application records to them during normal runtime initialization. This is concrete default-enabled data ex...

The package contains a concrete, enabled default path that exports runtime records and error data to hard-coded third-party webhooks. It has no install-time execution, but the application...

Source establishes a direct path from account credentials to a third-party logging endpoint during ordinary initialization. This is concrete credential exfiltration, not required mail-sto...

The source contains a direct chain from stored account password to an unrelated remote logging endpoint during normal Android initialization. Absence of lifecycle hooks does not mitigate...