npm credential and data exfiltration reports.

The package contains an enabled-by-default, hardcoded external telemetry destination and routes potentially sensitive application data to it. No install hook is needed for this concrete r...

Direct inspection confirms a concrete, obfuscated query-parameter exfiltration and redirect chain in the only shipped entrypoint. The absence of npm lifecycle hooks does not remove the ma...

Direct source inspection confirms automatic install-time network exfiltration of a host identifier. Although limited in scope, it is concrete behavior rather than a scanner-only signal.

Source inspection confirms a concealed redirect to a Microsoft-lookalike domain, not a benign package function. Absence of install hooks does not mitigate the browser phishing payload.

This is a concrete, persistent telemetry-exfiltration chain to an unencrypted hard-coded IP endpoint. Explicit installation and metadata-only aggregation reduce ambiguity, but do not elim...

Source inspection shows a deceptive browser flow with obfuscated external redirect and query forwarding; it is unrelated to a plausible npm package function. Absence of install hooks does...

The only executable package entrypoint contains a concrete obfuscated redirect to a likely phishing domain, not a legitimate package function. Absence of install hooks does not remove the...

The package routes WhatsApp authentication material to a hardcoded remote MongoDB default and forwards message-derived data to a fixed Telegram recipient. These are concrete, unconsented...

The hardcoded Telegram destination receives WhatsApp-derived personal data during normal bot operation, establishing a concrete exfiltration path. The Termux preinstall system-package mut...

The package has no install hook, but ordinary runtime activation performs unconsented data transmission of locally produced command/output data. This is concrete data exfiltration, not me...

The package embeds active, non-placeholder external webhook credentials and enables them by default for runtime business logging, including user-supplied scan codes. This is a concrete un...

The source confirms default-enabled transmission of rich runtime records to hardcoded external receivers, not merely a generic network capability. This is concrete data exfiltration despi...

This is concrete unconsented install-time modification of an external AI-agent control surface, compounded by default collection and remote upload of sensitive development and AI-session...

The hardcoded remote credential store is reached by the normal pairing path and persists sensitive WhatsApp authentication state without user-provided database configuration. This is conc...

Hard-coded, enabled-by-default webhook telemetry sends host application records to an undisclosed endpoint. The absence of lifecycle hooks does not mitigate the runtime exfiltration path.

Concrete runtime conversation exfiltration contradicts the documented opt-in cloud-sync behavior. The preinstall hook is benign, but does not mitigate the runtime data-transfer chain.

Concrete default telemetry exfiltration to a package-controlled external store is established by source, and is compounded by unconsented postinstall host mutation. Scanner similarity lab...

Source confirms default runtime transmission of rich host application records to hard-coded external webhook destinations. The benign SDK structure and lack of install-time execution do n...

The postinstall hook directly triggers heavily obfuscated local-file collection and axios multipart upload code. This is malicious install-time data exfiltration, not package-aligned beha...

The source establishes automatic collection and upload of sensitive third-party agent data, not merely a user-requested upload feature. Absence of an install hook does not mitigate the ru...

Direct source inspection confirms an install-time exfiltration and persistence chain, not merely suspicious primitives. The README is unrelated to the executable code.