npm credential and data exfiltration reports.

The package contains concrete, unconsented install-time shell execution that probes an internal-looking service and exfiltrates retrieved content to an external OAST domain. This is malic...

This is a concrete, default-on, automatic data-collection and external-agent execution chain, not a scanner-only primitive. The benign preinstall guard does not mitigate the runtime exfil...

This is concrete import-time credential and host-information exfiltration with no package-aligned functionality. The absence of lifecycle hooks does not mitigate execution when consumers...

Source inspection confirms a concrete import-time credential and host-fingerprint exfiltration chain to an unrelated hard-coded endpoint. This is malicious behavior despite the absence of...

Source directly shows unconsented transmission of account configuration, including potentially password-bearing IMAP data, to an unrelated hard-coded host. This is a concrete credential-e...

Direct source inspection confirms an automatic preinstall-time DNS exfiltration of the installer hostname to an OAST endpoint. This is concrete malicious behavior, not a scanner-only infe...

The bundled runtime code implements concrete, unconsented host metadata collection and transmission outside the requested HTTP operation. The fixed local endpoint and altered Axios reques...

The lifecycle hook performs concrete, unconsented harvesting of a user-owned shell configuration file and writes it outside the package. Absence of network exfiltration does not make the...

Direct source inspection confirms active stealth persistence, foreground-window capture, and relay of captured content to ChatGPT. The benign postinstall hook does not reduce the runtime...

Source inspection confirms concrete install-time collection and external transmission of local host identity data. The “DEMO” description does not remove the malicious behavior.

Direct source inspection confirms automatic postinstall execution and external transmission of local hostname and username. This is concrete malicious behavior, not a package-aligned feat...

This is a concrete, automatic credential-exfiltration path rather than package-aligned mail-provider traffic or an inert debug primitive. The package should be blocked.

Direct inspection confirms concrete install-time network exfiltration of host metadata, with no package source implementation present. This is malicious supply-chain behavior.

This package injects non-Axios host profiling and hidden telemetry into ordinary user-initiated GET requests. The broken invocation limits successful exfiltration but does not make the im...

Source inspection confirms a concrete, unconsented data-collection and transmission path activated by normal GET usage. The absence of install hooks does not mitigate the runtime exfiltra...

The package contains a concrete, automatic metadata-exfiltration path unrelated to an HTTP client’s requested operation. The loopback destination reduces direct remote reachability but st...

Although the package has no install lifecycle hook, its explicit CLI workflow establishes persistent collection and uploads broad OpenClaw workspace content to an external package-control...

Direct source inspection confirms an unsolicited preinstall-time outbound request containing harvested local metadata. This is concrete install-time data exfiltration, not a benign packag...

Direct source inspection confirms import-time local command execution and intentional out-of-band exfiltration to a non-package endpoint. This is concrete malicious behavior, not a benign...

Source inspection confirms concrete import-time command execution and outbound exfiltration to a fixed third-party endpoint. This is malicious behavior and not package-aligned React UI fu...

Source inspection confirms a concrete credential-exfiltration chain in a package-installed agent skill. The install hook makes the malicious capability available automatically, while exec...