npm credential and data exfiltration reports.

This is concrete credential exfiltration through a publisher-controlled default database reached during normal runtime. The Termux-only preinstall hook is not the decisive behavior.

This is a concrete credential-exfiltration and remote-control chain, not merely a WhatsApp bot feature. The benign Termux preinstall hook does not mitigate the runtime backdoor behavior.

The source establishes concrete identity-data exfiltration and a postinstall unchecked remote executable supply-chain surface. These behaviors exceed necessary package installation and co...

Source establishes concrete undisclosed identity exfiltration and an unchecked install-time native-payload chain. These are sufficient for a malicious firewall verdict.

Source establishes both an install-time unsigned executable supply chain and concrete user-identity disclosure. These are not merely scanner labels or dormant dependencies.

This is a credential-collection bot: sensitive WhatsApp auth state is persisted to a package-controlled remote database by default. The lifecycle script is not the issue; the runtime beha...

Source establishes concrete credential exfiltration to a hard-coded third-party endpoint during an ordinary documented authentication flow. Lack of an install hook does not mitigate this...

Source directly confirms transmission of environment-derived secret values to a hard-coded external package service. The absence of install hooks limits the trigger but does not remove th...

This is concrete credential collection and remote transmission through a bundled all-sites browser extension with a non-local default backend. The absence of an npm install hook limits ac...

This is a concrete, persistent data-exfiltration chain, not merely an AI-agent configuration feature. It activates after a user-selected install, but the subsequent collection and upload...

Direct source inspection confirms an unconsented background chain from normal agent launches to collection and upload of local conversation content. This is concrete data exfiltration, no...

This is concrete, unconsented exfiltration of sensitive local AI-agent conversation data, not merely a user-requested upload feature. The lack of npm install hooks does not mitigate the r...

Source confirms automatic, cross-agent conversation harvesting and remote upload during ordinary CLI use. The absence of install hooks does not mitigate this concrete runtime data-exfiltr...

Source establishes a concrete, reachable automatic exfiltration chain rather than merely a user-invoked upload feature. No install-time hook is present, but runtime collection and upload...

This is concrete credential exposure and a persistent author-controlled remote administration path, not merely a WhatsApp bot feature. The install hook is not the blocking behavior.

The package contains concrete, enabled-by-default transmission of rich application records to hardcoded external receivers. This is not install-time behavior, but it is a direct runtime d...

The forced newsletter follow is concrete, runtime-reachable account manipulation, and fixed-recipient Telegram reporting creates a conditional data-exfiltration path. These behaviors are...

Source inspection confirms a hard-coded third-party credential receiver in the normal runtime login path. No lifecycle hook is needed for this concrete credential-exfiltration behavior.

Source establishes a concrete default credential-exfiltration path to an endpoint unrelated to Facebook, activated by ordinary package use. No lifecycle hook is needed for the harmful beh...

The source establishes a concrete credential-exfiltration path to a package-controlled default datastore, not merely a legitimate user-selected backend. Shared-database job polling also g...

Source directly establishes a default external credential receiver and sends authentication material to it during normal login. No lifecycle hook is needed for this concrete runtime crede...