npm credential and data exfiltration reports.

Direct source inspection confirms an install-time lifecycle script performs unconsented credential, SSH key, wallet/seed, and environment secret exfiltration to Telegram. This is concrete...

Read-only source inspection confirms concrete install-time credential and sensitive file exfiltration to Telegram with no user consent or package-aligned purpose. This is malicious malwar...

Direct source inspection confirms install-time credential and sensitive-file exfiltration unrelated to the advertised web3 SDK. This is concrete malicious behavior with automatic lifecycl...

Direct source inspection confirms unconsented install-time credential harvesting and exfiltration to a hardcoded Telegram bot. This is concrete malicious behavior unrelated to a Polygon SDK.

Source inspection confirms unconsented install-time collection and exfiltration of host identity data to an unrelated webhook endpoint. This is concrete malicious behavior, not merely dua...

Direct source inspection confirms an install-time network exfiltration path for local host and project metadata. The concrete postinstall trigger and external webhook make this malicious...

Direct source inspection confirms concrete data exfiltration from index.js to an external webhook on package import. The misspelled install hook reduces install-time reach but does not re...

Direct source inspection confirms deliberate unconsented install-time secret harvesting and exfiltration unrelated to the advertised debug wrapper. The sandbox evasion and self-deletion f...

Direct source inspection confirms unconsented install-time credential and wallet theft with outbound Telegram exfiltration and evasion/self-delete behavior. This is concrete malicious beh...

Direct source inspection confirms unconsented install-time credential, file, and wallet data exfiltration to a Telegram bot, unrelated to the package's advertised debug utility behavior....

Source inspection confirms concrete runtime credential capture of a broad MCP_API_KEY and transmission to the package's external service, not merely scanner noise. Lack of install hooks a...

Source inspection confirms an install lifecycle script that exfiltrates CI/build identifiers and hostname to an external callback, so this is not merely a scanner false positive. The limi...

Direct source inspection confirms import-time credential/environment harvesting and external exfiltration with no user consent or package-aligned purpose. This is concrete malicious behav...

Read-only source inspection confirmed package.json contains the only executable behavior: an install lifecycle hook that sends installer identity and environment context to an unrelated e...

Source inspection confirms concrete install-time network exfiltration to a hardcoded Sentry DSN via package.json preinstall and examples/verify.js. This is unconsented lifecycle execution...

The package contains legitimate-looking Sentry helpers, but package installation automatically sends data to a hardcoded Sentry project and resolves/attaches the installer's public IP. Th...

Source inspection confirms unconsented install-time network telemetry to a hardcoded Sentry project plus public IP collection. Although the package exposes a plausible logging API, execut...

Direct source inspection confirms postinstall credential, file, and wallet collection with network exfiltration to Telegram. This is concrete malicious behavior and not package-aligned wi...

The inspected source confirms unconsented install-time collection and exfiltration of environment and host metadata to external endpoints. The declared security-research PoC purpose does...

Static inspection confirms no install-time malware, but the runtime bundle has a concrete hardcoded endpoint path for payment and PII collection that is not merely a noisy scanner secret....

Source inspection confirms an install-time obfuscated script that transmits the full environment, creating a concrete credential-exfiltration risk. The behavior is not package-aligned tel...