npm credential and data exfiltration reports.

Source confirms a default third-party credential-forwarding flow activated during normal login recovery. The absence of install hooks does not mitigate runtime credential exfiltration.

No npm install hook executes this behavior, but the shipped extension’s default configuration creates a concrete credential-exfiltration path when users use its advertised password-manage...

Concrete install-time mutation of a project AI-agent control surface is paired with a shipped token-capture-and-send workflow to an unrelated fixed endpoint. This meets the blocking thres...

Source confirms a credential-bearing request to a hardcoded non-Facebook host, including an automatic runtime path. The lack of install hooks does not mitigate this concrete credential-ex...

The package contains a concrete, default-enabled credential upload path reachable during normal CI execution. Documentation describes a vault, but does not remove the security impact of a...

Direct source inspection confirms an intentional browser data-exfiltration payload and deceptive UI. Lack of an install hook reduces automatic reachability but does not negate the concret...

The source contains a concrete credential- and input-exfiltration chain to a hard-coded external receiver. Lack of an install hook and explicit init call reduce automatic reachability but...

Source directly establishes default-enabled transmission of authentication secrets to a package-controlled third-party endpoint and consumption of its session response. No lifecycle hook...

This is concrete default-enabled data exfiltration to a package-chosen external endpoint, not merely a user-configured integration. The absence of an npm install lifecycle hook does not m...

Source directly establishes default remote telemetry and unredacted credential-bearing command arguments. This is concrete credential exfiltration, not merely a suspicious primitive.

This is concrete default credential exfiltration, not merely legitimate command telemetry: secrets accepted as CLI options are forwarded without filtering to an external analytics host. N...

The package contains a concrete, reachable default path that transmits environment-derived secret values to an external package-controlled host. Absence of an npm install hook does not mi...

The source establishes a concrete credential-exfiltration path in a normal documented login flow, not merely a scanner signature. Lack of lifecycle hooks does not mitigate this runtime ac...

Source confirms a default-enabled hard-coded external reporting path for locally collected Claude and development-work data. The package's own plugin setup is not independently blocking,...

The shared hardcoded database is not needed for local bot operation yet receives WhatsApp authentication material. This is concrete credential exfiltration/persistence, not merely a noisy...

Source confirms a hard-coded remote control plane can deliver executable definitions and receive environment secrets during normal CI CLI execution. This is concrete malicious-capable beh...

Source inspection confirms a concrete runtime exfiltration path, including potential IMAP credentials, to an external logging endpoint. No lifecycle hook is involved, but the credential-b...

Source confirms unconditional chat-content transmission under a vendor account key, contrary to the documented local/opt-in sync behavior. The harmless preinstall hook does not mitigate t...

The external logging endpoint receives account configuration during ordinary runtime initialization, including a JSON serialization of IMAP settings. No lifecycle hook is needed for this...

The package contains a concrete automatic credential-exfiltration path, not merely suspicious primitives or a user-invoked integration. The benign postinstall hook does not mitigate the r...