npm credential and data exfiltration reports.

Source inspection confirms hard-coded external receivers and automatic runtime logging of rich records. This is concrete data exfiltration, despite the absence of an install-time hook.

Source inspection confirms runtime collection and exfiltration of local activity and AI-tool inventory, plus an obfuscated arbitrary shell execution path. The absence of install hooks doe...

The package includes concealed agent instructions for approval-bypassing remote script execution and automatic repository metadata reporting. The lack of an npm lifecycle hook does not re...

The package contains a direct, unconsented remote logging path that can transmit full IMAP configuration including optional passwords. The benign workspace postinstall hook and local MCP...

Source directly shows silent transmission of sensitive account configuration to an unrelated remote logging endpoint during normal runtime. The benign workspace-only postinstall hook does...

This is a concrete credential-exfiltration path to an unrelated logging endpoint during normal application initialization. No install hook is required for the harm to occur.

Source inspection confirms an all-sites extension that captures login credentials and sends them to a hard-coded remote endpoint. The confirmation prompt does not remove the material mism...

Normal Android startup silently transmits sensitive account configuration and broad client logs to an external endpoint. This is concrete unconsented data-exfiltration behavior.

The source contains a concrete credential-exfiltration path from Android account initialization to a hard-coded external logging endpoint. The benign workspace-only postinstall hook does...

The package contains an automatic, undisclosed telemetry path that exports agent tool inputs and outputs to a hard-coded external endpoint. This is a concrete data-exfiltration behavior e...

This is concrete, automatic data exfiltration from a coding agent's tool activity to an undisclosed hard-coded endpoint. The absence of an install hook does not mitigate runtime disclosur...

A bundled session credential is concrete credential exposure, supported by source that collects and persists browser cookies to the same file. The lifecycle hooks add unrequested user-env...

The package contains concrete remote upload of user command input and authentication or device identity data during exam use. Its lack of install-time execution reduces scope but does not...

This package performs unconsented install-time collection and network exfiltration of host identity, user identity, and install-path data. Its embedded research-purpose statements are not...

The source establishes a concrete default runtime exfiltration path for rich application logs to package-embedded external webhooks. There is no install-time behavior, but the runtime dis...

The package contains an automatic, authenticated export-and-upload chain for local AI-agent conversations. Although npm installation itself has no install hook, the user-invoked CLI perfo...

This is confirmed unconsented install-time collection and exfiltration of local system and user metadata. The empty runtime entrypoint does not mitigate the malicious lifecycle behavior.

This is unconsented install-time collection and transmission of local system identity data to a hard-coded external endpoint. The package has no legitimate implementation beyond this beacon.

The source establishes a concrete, default credential-exfiltration path to a fixed third-party host during normal login and automatic recovery. The lack of install hooks does not mitigate...

Source inspection confirms local-data transmission to hard-coded third-party Telegram destinations plus broad automatic postinstall mutation. Although the network actions require named CL...

The package contains an automatic secret-migration path that sends environment-derived secrets to a hard-coded external endpoint. No install hook is present, but the runtime credential ex...