npm security reports, with evidence.

This package implements a concrete third-party collection and transmission path for complete Codex credentials. The lack of automatic lifecycle execution reduces stealth but does not remo...

Source directly shows the capture and remote upload of reusable credentials to third-party endpoints. The absence of an install hook does not remove this credential-exfiltration behavior.

The package performs unconsented postinstall execution of an opaque executable specifically to install agent hooks. That is a foreign AI-agent control-surface mutation chain, made riskier...

This is a concrete credential-exfiltration path to a hard-coded external host, hidden inside a package presented as a local CLI web console. The lack of an npm lifecycle hook does not rem...

This is a concealed, remotely controlled account-action mechanism unrelated to normal media handling. The direct call path from socket construction to automatic follows makes the behavior...

OpenSSF/OSV malware advisory MAL-2026-16085 blocks this version. crypto-validates@0.0.2 ships a dist/index.js identical to polygon-toolkits-validator@1.1.4: validate(input) base64-encodes...

OpenSSF/OSV malware advisory MAL-2026-16088 blocks this version. pumpswap-sdk-v1@0.0.1 presents crypto helpers for the PumpSwap SDK, but validate(input) base64-encodes its argument and PO...

OpenSSF/OSV malware advisory MAL-2026-16089 blocks this version. raydium-clmm-sdk 0.0.1 and 0.0.2 (identical dist/index.js) present crypto helpers for the Raydium CLMM, but initKeypair(co...

OpenSSF/OSV malware advisory MAL-2026-16089 blocks this version. raydium-clmm-sdk 0.0.1 and 0.0.2 (identical dist/index.js) present crypto helpers for the Raydium CLMM, but initKeypair(co...

OpenSSF/OSV malware advisory MAL-2026-16119 blocks this version. The preinstall lifecycle script in etoro-client@999.0.0 unconditionally sends the installer's hostname, OS username, and c...

OpenSSF/OSV malware advisory MAL-2026-16118 blocks this version. On npm install, preinstall.js runs automatically and sends the installer's hostname, username, platform, and current worki...

OpenSSF/OSV malware advisory MAL-2026-16117 blocks this version. The package's preinstall.js lifecycle script runs on npm install and executes host reconnaissance commands (whoami, ipconf...

OpenSSF/OSV malware advisory MAL-2026-16116 blocks this version. The package's preinstall lifecycle script (preinstall.js) reads the installer's OS hostname, username, and current working...

OpenSSF/OSV malware advisory MAL-2026-16114 blocks this version. The package's preinstall.js runs automatically on `npm install` and collects host identifiers (os.hostname(), os.userInfo(...

OpenSSF/OSV malware advisory MAL-2026-16113 blocks this version. The preinstall lifecycle script in etoro-api@999.0.0 (preinstall.js) auto-executes on npm install and performs an HTTP GET...

OpenSSF/OSV malware advisory MAL-2026-16112 blocks this version. etoro-analytics@99.0.2 ships a preinstall lifecycle script (preinstall.js) that automatically runs on `npm install`. The s...

OpenSSF/OSV malware advisory MAL-2026-16111 blocks this version. The package's preinstall.js lifecycle script executes automatically on `npm install` and performs reconnaissance on the in...

OpenSSF/OSV malware advisory MAL-2026-16120 blocks this version. The package's preinstall lifecycle script (preinstall.js) issues an HTTP GET to the hardcoded bare-IP endpoint http://209....

The package contains a reachable automatic credential-exfiltration path to a fixed unrelated host. No install hook is needed for this runtime behavior to be malicious.

This is concrete automatic data exfiltration triggered by ordinary agent use, not merely an explicit upload command. The lack of an install lifecycle hook does not mitigate the detached r...

This is concrete, automatic install-time data exfiltration unrelated to the stated package purpose. It should be blocked.