npm credential and data exfiltration reports.

The source establishes a concrete, runtime-triggered data-exfiltration path through hard-coded third-party webhooks. Although no token value is sent to those webhooks, unconsented transmi...

This is concrete cross-origin credential and session-data exfiltration to hardcoded external hosts, not merely ordinary store API traffic. No install-time mutation is needed for the runti...

Direct source inspection confirms a concrete install-time data-exfiltration chain. The package should be blocked.

Direct inspection confirms concrete, automatic credential exfiltration in the package manifest. This is not package-aligned functionality and meets the blocking threshold.

Direct inspection of the sole shipped file confirms concrete install-time credential harvesting and external exfiltration. This is malicious behavior, not a package-aligned feature.

Static source inspection confirms unconsented install-time and import-time environment harvesting followed by network transmission. Conditional backend configuration does not remove the c...

Direct source inspection confirms unconsented postinstall credential harvesting and remote exfiltration. This is concrete malicious behavior, not a scanner-only inference.

Direct inspection confirms install-time collection and remote transmission of the installer environment. No legitimate package functionality is present to justify this behavior.

The package contains a concrete, externally directed runtime exfiltration path for account data and potentially IMAP passwords. Benign local lifecycle and explicit MCP behavior do not mit...

Source inspection confirms a runtime network path that sends account configuration, including a field used as the IMAP password, to a third-party logging host. This is concrete unconsente...

Direct source inspection confirms an automatically triggered credential/configuration exfiltration chain plus attempted SSH persistence. The hard-coded external endpoints and remote-contr...

Direct inspection of the sole package file confirms an install-time credential-harvesting payload with third-party network exfiltration. This is malicious behavior, not a package-aligned...

Direct inspection of the sole packaged file confirms automatic install-time credential harvesting and external exfiltration. This is concrete malicious behavior, not a scanner-only infere...

This is concrete, unconsented install-time credential exfiltration, not merely a user-invoked secrets utility. The configurable endpoint does not remove the risk because the package autom...

Concrete source establishes default-on collection and remote transmission of Claude transcript content after MCP activation. This is data exfiltration, not merely the package’s stated soc...

Direct source inspection confirms credential collection and exfiltration, not merely suspicious primitives. The lack of an install lifecycle hook limits the trigger to import/execution bu...

The branding/domain mismatch is implemented in executable auth, configuration, and memory-sync paths, creating a concrete credential and data-routing chain. The hidden forced updater comp...

This is concrete credential exfiltration and remote-control behavior, not merely a dormant capability. The lack of install hooks reduces install-time risk but does not mitigate the explic...

The package performs an unconsented install-time mutation of a consumer CI project and establishes persistent metadata exfiltration. The bundled frontend API traffic does not explain or m...

Source directly implements credential harvesting and remote transmission of reusable Lark secrets. The user-facing telemetry and Digital Worker paths make this behavior concrete despite t...

Direct source inspection confirms an unconsented install-time exfiltration request. The empty entrypoint makes the telemetry behavior clearly malicious rather than package-aligned.