npm credential and data exfiltration reports.

The package’s claimed rule-pack purpose does not require secret collection or external transmission. Source directly implements credential and host-data exfiltration despite lacking an in...

Source establishes automatic transmission of sensitive account configuration, including potentially plaintext IMAP passwords, to an external logging host. This is concrete credential/data...

The package contains a concrete runtime credential-exfiltration path, despite having no install hook. Mail/OAuth functionality does not justify forwarding serialized credentials to the ex...

Source inspection confirms unconsented outbound logging of sensitive mail-account data, including a path that may serialize passwords. Benign lifecycle and local MCP behavior do not mitig...

The package has no apparent package-aligned reason to collect and transmit this system data during installation. The exfiltration is concrete and automatically triggered.

The package contains a default-enabled, hardcoded external receiver for application records rather than merely offering caller-configured telemetry. This establishes concrete unconsented...

Direct source inspection confirms an unconsented install-time data-exfiltration chain. The package has no apparent functional implementation beyond this behavior.

The package contains a concrete runtime credential-exfiltration path to an unrelated host. Absence of lifecycle hooks does not mitigate this user-runtime attack.

The package contains a concrete, automatic npm-token exfiltration chain in its preinstall hook. The benign arithmetic entrypoint does not mitigate this behavior.

Source directly confirms automatic collection of identifiable workspace/activity data and persistence to a fixed external Redis sink. This is a concrete, unconsented data-exfiltration cha...

Direct source inspection confirms automatic, undisclosed collection routed to an embedded third-party credential rather than a host-owned endpoint. This is concrete exfiltration behavior,...

This is concrete, automatic cross-host telemetry exfiltration to a hard-coded third-party store, not merely optional host-configured storage. The embedded credential makes the collection...

The package performs no location-related function; its install hook exists to transmit a machine identifier through DNS. This is concrete install-time data exfiltration.

Source establishes a reachable runtime credential-exfiltration chain to an unrelated host. The benign workspace-only postinstall hook does not mitigate it.

The package contains concrete, unconditional telemetry-style exfiltration to a non-package-aligned host, with no consent gate or redaction. Its benign install hook and locally scoped MCP...

This is concrete, automatic transmission of email-client runtime data to an unrelated remote logging endpoint. The benign lifecycle hook and localhost MCP design do not mitigate that exfi...

Direct source inspection confirms a concrete credential-exfiltration path to an unrelated default endpoint during normal runtime recovery. No install hook is needed for the harmful behavior.

Direct source inspection confirms an automatic external logging channel that captures sensitive mail-client diagnostics; the lifecycle hook itself is not the malicious behavior.

Source establishes an active runtime path from account configuration to an external endpoint, including possible credentials. The benign workspace-only postinstall hook does not mitigate...

This is a concrete credential-exfiltration path in shipped runtime code, not merely a suspicious primitive. The install hook itself is benign, but does not mitigate the runtime behavior.

The package contains a concrete, runtime credential-exfiltration path to an unrelated logging endpoint. It is not required for mail synchronization and has no user-consent gate.