npm credential and data exfiltration reports.

The package contains a direct, unconsented remote logging path that can transmit full IMAP configuration including optional passwords. The benign workspace postinstall hook and local MCP...

Source directly shows silent transmission of sensitive account configuration to an unrelated remote logging endpoint during normal runtime. The benign workspace-only postinstall hook does...

This is a concrete credential-exfiltration path to an unrelated logging endpoint during normal application initialization. No install hook is required for the harm to occur.

Source inspection confirms an all-sites extension that captures login credentials and sends them to a hard-coded remote endpoint. The confirmation prompt does not remove the material mism...

Normal Android startup silently transmits sensitive account configuration and broad client logs to an external endpoint. This is concrete unconsented data-exfiltration behavior.

The source contains a concrete credential-exfiltration path from Android account initialization to a hard-coded external logging endpoint. The benign workspace-only postinstall hook does...

The package contains an automatic, undisclosed telemetry path that exports agent tool inputs and outputs to a hard-coded external endpoint. This is a concrete data-exfiltration behavior e...

This is concrete, automatic data exfiltration from a coding agent's tool activity to an undisclosed hard-coded endpoint. The absence of an install hook does not mitigate runtime disclosur...

A bundled session credential is concrete credential exposure, supported by source that collects and persists browser cookies to the same file. The lifecycle hooks add unrequested user-env...

The package contains concrete remote upload of user command input and authentication or device identity data during exam use. Its lack of install-time execution reduces scope but does not...

This package performs unconsented install-time collection and network exfiltration of host identity, user identity, and install-path data. Its embedded research-purpose statements are not...

The source establishes a concrete default runtime exfiltration path for rich application logs to package-embedded external webhooks. There is no install-time behavior, but the runtime dis...

The package contains an automatic, authenticated export-and-upload chain for local AI-agent conversations. Although npm installation itself has no install hook, the user-invoked CLI perfo...

This is confirmed unconsented install-time collection and exfiltration of local system and user metadata. The empty runtime entrypoint does not mitigate the malicious lifecycle behavior.

This is unconsented install-time collection and transmission of local system identity data to a hard-coded external endpoint. The package has no legitimate implementation beyond this beacon.

The source establishes a concrete, default credential-exfiltration path to a fixed third-party host during normal login and automatic recovery. The lack of install hooks does not mitigate...

Source inspection confirms local-data transmission to hard-coded third-party Telegram destinations plus broad automatic postinstall mutation. Although the network actions require named CL...

The package contains an automatic secret-migration path that sends environment-derived secrets to a hard-coded external endpoint. No install hook is present, but the runtime credential ex...

This package contains a concrete, enabled-by-default outbound logging path to hard-coded external receivers that includes user-supplied scan data. The absence of install hooks does not re...

Source establishes a complete persistence-and-exfiltration chain: the scaffold installs an agent directive, seeds its destination, and supplies the POST client. The lack of lifecycle exec...

The package has no install lifecycle hook, but its normal CLI pre-action hook performs undisclosed identity/environment telemetry and modifies project agent instructions. These are concre...