npm credential and data exfiltration reports.

Source confirms a credential-bearing request to a hardcoded non-Facebook host, including an automatic runtime path. The lack of install hooks does not mitigate this concrete credential-ex...

The package contains a concrete, default-enabled credential upload path reachable during normal CI execution. Documentation describes a vault, but does not remove the security impact of a...

Direct source inspection confirms an intentional browser data-exfiltration payload and deceptive UI. Lack of an install hook reduces automatic reachability but does not negate the concret...

The source contains a concrete credential- and input-exfiltration chain to a hard-coded external receiver. Lack of an install hook and explicit init call reduce automatic reachability but...

Source directly establishes default-enabled transmission of authentication secrets to a package-controlled third-party endpoint and consumption of its session response. No lifecycle hook...

This is concrete default-enabled data exfiltration to a package-chosen external endpoint, not merely a user-configured integration. The absence of an npm install lifecycle hook does not m...

Source directly establishes default remote telemetry and unredacted credential-bearing command arguments. This is concrete credential exfiltration, not merely a suspicious primitive.

This is concrete default credential exfiltration, not merely legitimate command telemetry: secrets accepted as CLI options are forwarded without filtering to an external analytics host. N...

The package contains a concrete, reachable default path that transmits environment-derived secret values to an external package-controlled host. Absence of an npm install hook does not mi...

The source establishes a concrete credential-exfiltration path in a normal documented login flow, not merely a scanner signature. Lack of lifecycle hooks does not mitigate this runtime ac...

Source confirms a default-enabled hard-coded external reporting path for locally collected Claude and development-work data. The package's own plugin setup is not independently blocking,...

The shared hardcoded database is not needed for local bot operation yet receives WhatsApp authentication material. This is concrete credential exfiltration/persistence, not merely a noisy...

Source confirms a hard-coded remote control plane can deliver executable definitions and receive environment secrets during normal CI CLI execution. This is concrete malicious-capable beh...

Source inspection confirms a concrete runtime exfiltration path, including potential IMAP credentials, to an external logging endpoint. No lifecycle hook is involved, but the credential-b...

Source confirms unconditional chat-content transmission under a vendor account key, contrary to the documented local/opt-in sync behavior. The harmless preinstall hook does not mitigate t...

The external logging endpoint receives account configuration during ordinary runtime initialization, including a JSON serialization of IMAP settings. No lifecycle hook is needed for this...

The package contains a concrete automatic credential-exfiltration path, not merely suspicious primitives or a user-invoked integration. The benign postinstall hook does not mitigate the r...

The package contains a concrete default-on exfiltration path to hardcoded external webhook receivers, not merely a generic request utility. No install hook is involved, but runtime use ex...

Source confirms automatic collection and remote transmission of raw command input, not merely network use for the advertised challenge service. The lack of install hooks limits installati...

Source confirms automatic upload of environment-derived secrets to a hardcoded external endpoint during ordinary GitHub Actions operation. Lack of an install hook does not remove the cred...

Source inspection confirms a concrete default path that posts rich application records to embedded external webhook receivers. This is not required by installation and no local persistenc...