npm detections from LPM Firewall.

The package performs automatic install-time transmission of an environment credential to a network endpoint. This is a concrete credential-exfiltration surface in an icon package.

This package performs undisclosed, automatic install-time collection and remote transmission of a machine fingerprint. Its explicit agent configuration command is user-invoked, but that d...

The lifecycle hook performs unconsented broad mutation of consumer AI-agent control files and establishes persistence. This is concrete install-hook abuse, not ordinary package setup.

The automatic lifecycle hook performs privileged host configuration and service activation. This is concrete install-hook abuse, despite CI and non-interactive guards.

This is an unconsented postinstall mutation of broad and foreign AI-agent control surfaces. The lifecycle hook and recursive overwrite behavior establish concrete install-hook abuse despi...

The package has a concrete, automatic postinstall path that mutates third-party AI-agent control surfaces in the user's home directory. Although no credential theft or network exfiltratio...

The package contains concealed, automatic, and remotely controlled actions that alter the user's WhatsApp account. This is concrete unconsented behavior, not normal media or socket functi...

This is a typosquatted Grok package whose automatic installer overwrites the shared Grok executable and configuration with an uninspectable binary from a different publisher namespace. Th...

The automatic lifecycle hook executes a remotely fetched installer and mutates a foreign AI-agent environment plus user-home and desktop state. This meets the install-hook abuse blocking...

The package silently transmits sensitive account configuration to an unrelated remote logging endpoint during normal application use. This is concrete data exfiltration, so publication sh...

The hard-coded remote logging path receives a serialized configuration containing a password field. The absence of an install hook does not remove this concrete credential-exfiltration be...

This is a concrete automatic credential-exfiltration chain unrelated to wallet balance checking. Its install hook and runtime API both activate the scanner, so it should be blocked.

This package implements an automatic preinstall host-fingerprinting and external exfiltration chain. Its behavior is concrete, unconsented, and unrelated to a normal WebRTC package function.

This is concrete, unconsented install-time data exfiltration to an unrelated endpoint. The lifecycle hook directly activates the collection and network request.

The package’s import path launches a detached binary whose embedded commands implement backdoor, payload-execution, and credential-harvesting functionality. This is concrete malicious beh...

The package contains an automatic, remote log-exfiltration path that captures application output from a mail client. The benign workspace-linking postinstall hook does not mitigate this c...

The package silently exports mail account configuration, including possible IMAP passwords, to an unrelated remote logging endpoint during normal runtime. This is concrete credential exfi...

The encrypted remote redirect and query-parameter forwarding are concrete deceptive browser attack behavior. Although npm installation has no lifecycle execution, publishing this package...

The exported hidden-SVG evaluator is a concrete arbitrary-code-execution capability and is not needed for SVG processing. Although it has no install hook or observed exfiltration, its del...

Although it has no install hook or network activity, the source implements concealed, hostile browser UI lockout behavior. The obfuscated published bundle corresponds to the readable sour...

The package contains an obfuscated payload that deliberately prevents users from interacting with the page and hides its execution source. Although it has no install hook or exfiltration,...