npm detections from LPM Firewall.

The runtime entry contains an automatically invoked, obfuscated Xelis mining payload with remote configuration, WebSocket, and Worker execution. This is concrete unauthorized cryptomining...

The package performs unconsented postinstall mutation of broad, foreign AI-agent control surfaces and weakens approval/intercepts tool use. This meets the block boundary even without conf...

Direct source inspection confirms automatic credential upload to a fixed external receiver. The lack of npm lifecycle hooks does not mitigate this runtime exfiltration path.

The package contains a concrete automatic credential-upload path to a fixed third-party endpoint. Lack of an npm lifecycle hook limits activation but does not remove the runtime exfiltrat...

The source establishes a concrete default runtime path from business-operation records to embedded external webhooks. The absence of install hooks does not mitigate this runtime data-exfi...

The lifecycle hook performs the exact unconsented broad AI-agent configuration mutation reserved for blocking. The setup is package-owned but crosses multiple external agent configuration...

The automatic postinstall writes and activates a third-party Herdr plugin surface; this meets the install-control-surface block boundary. No lifecycle network exfiltration was found, but...

This is concrete browser cryptomining behavior, not a benign utility or merely suspicious primitive. Dynamic endpoint construction prevents naming a verified host, but does not weaken the...

The shipped entrypoint auto-runs an obfuscated Xelis cryptocurrency miner at runtime. The absence of install hooks does not mitigate the malicious import-time/browser execution.

Direct inspection confirms a concrete automatic reconnaissance-and-exfiltration chain, not merely suspicious primitives. The benign UI entrypoint does not justify the install-time behavior.

This package silently substitutes a package-controlled remote API for direct Facebook credential login and sends supplied credentials there by default. No install hook is needed for this...

The artifact contains concrete automatic cryptomining behavior and deceptive package documentation. It is not an install hook, but import-time execution provides a direct malicious runtim...

This is concrete unconsented account manipulation on the package's normal runtime path, controlled by a remote payload list. The lifecycle script itself is benign but does not mitigate th...

This is concrete, automatic install-time host compromise behavior, not an inert installer primitive. The lack of observed exfiltration does not mitigate the concealed privileged remote-ac...

This is a concrete, unconsented install-time remote-access and stealth-persistence chain, not a package-aligned installer. Source contains no compensating user-command gate beyond the ele...

Concrete unconsented postinstall persistence and remote-access changes establish malware behavior. No exfiltration endpoint is needed to substantiate the local administrative backdoor.

Normal email-client networking does not justify silently exporting account configuration to an unrelated logging endpoint. The harmless scoped postinstall hook does not mitigate this runt...

This is concrete install-time privilege escalation, stealth, and remote-access enablement rather than a legitimate package-aligned installer. The absence of a web endpoint does not mitiga...

Runtime source directly sends serialized IMAP configuration, including a possible password field, to an external logging host. The benign workspace-symlink postinstall does not mitigate t...

This is an unconsented install-time remote-access persistence chain, not a user-invoked administrative tool. The lack of a JavaScript exfiltration client does not mitigate the automatic h...

This is concrete malicious install-time behavior: it modifies Windows security controls and creates concealed privileged remote access. Lack of observed exfiltration does not mitigate the...