npm persistence and destructive behavior reports.

Source inspection confirms concrete import-time remote payload delivery and Startup-folder persistence, inconsistent with the documented calendar utility. This is malicious behavior, not...

The package contains a concealed import-time remote payload delivery and persistence chain unrelated to calendar utilities. This is concrete malware behavior.

This is concrete, unconsented persistence through import-time dropping of an embedded executable, unrelated to the stated package purpose.

This is concrete hidden persistence behavior unrelated to the stated utility package and activates merely on import. Absence of an npm lifecycle hook does not mitigate the import-time dro...

This is concrete stealthy persistence via an import-time payload drop, unrelated to the documented placeholder utilities. The absence of an install hook does not mitigate the malicious ru...

The package description promises simple utilities, but its sole implementation is a concealed native payload dropper with Startup-folder persistence. The absence of lifecycle hooks does n...

Direct source inspection confirms a hidden executable payload and import-triggered Startup-folder persistence. The absent lifecycle hook does not mitigate the malicious runtime behavior.

The package contains an explicit remote-access provisioning script that authorizes a bundled third-party SSH key and default Tailscale enrollment credential. Although it is not install-ti...

Source inspection confirms deliberate stealth persistence and protected-window bypass, not merely scanner heuristics. Although activation is user-commanded rather than install-time, the c...

The package contains an install-time, remotely directed persistence and data-exfiltration chain. The copied unrelated README does not describe or justify this behavior.

Source inspection confirms unconsented install-time mutation of consumer GitHub Actions configuration plus persistent external registration. The runtime bundle does not establish credenti...

This is concrete unconsented install-time mutation of a consumer CI control surface combined with external reporting and persistence. The frontend bundle's normal Firebase/API traffic doe...

The source contains a concrete, automatically executed browser attack chain with data exfiltration and destructive account control actions. The lack of install hooks does not mitigate run...

The CLI bundle's network and secret handling is aligned with an environment/secrets manager, but the postinstall hook performs destructive filesystem changes outside the package without u...

Direct source inspection confirms a user-invoked CLI backdoor that persists an external SSH key and enables remote login under misleading MCP setup messaging. This is concrete unauthorize...