npm detections from LPM Firewall.

The package contains a concrete, externally directed runtime exfiltration path for account data and potentially IMAP passwords. Benign local lifecycle and explicit MCP behavior do not mit...

Source inspection confirms a runtime network path that sends account configuration, including a field used as the IMAP password, to a third-party logging host. This is concrete unconsente...

The package contains concrete import-time arbitrary payload execution in its published Node entrypoints. The behavior is concealed in build artifacts and is unrelated to the library's blo...

The package's real export path introduces obfuscated system reconnaissance and remote-capable execution primitives that are not required for Chai assertions. This is malicious import-time...

The package contains an undocumented, unconditionally triggered detached subprocess and database-connection payload unrelated to its stated testing utility. This is concrete malicious run...

The package contains a concrete, automatically triggered hidden child-process payload unrelated to its advertised testing functionality. The added dependency and suppressed child output r...

The package contains an unrelated, concealed child-process payload invoked during normal plugin initialization. Its missing `spawn` import makes the attempt fail in standard Node, but doe...

This is concrete import-time arbitrary-code execution from externally staged content, not a package-aligned SDK function. The absence of the loader in source makes the shipped distributio...

The package contains a concrete, stealthy runtime chain that fetches and executes attacker-controlled remote JavaScript. Absence of an install hook does not mitigate arbitrary code execut...

Direct source inspection confirms an automatically triggered credential/configuration exfiltration chain plus attempted SSH persistence. The hard-coded external endpoints and remote-contr...

The package's benign exported helpers do not justify a postinstall flow that retrieves and executes mutable remote code. This is concrete install-time remote code execution.

Direct source inspection confirms an obfuscated install-time reverse-shell payload with no legitimate implementation to justify it. The package is malicious and should be blocked.

Direct source inspection confirms import-time reverse-shell behavior and outbound host callback. This is concrete unauthorized remote command execution, not merely a scanner match.

Direct inspection of the sole package file confirms an install-time credential-harvesting payload with third-party network exfiltration. This is malicious behavior, not a package-aligned...

Direct source inspection confirms import-time reverse-shell behavior in the package main entrypoint. The lack of lifecycle scripts does not mitigate execution when the entrypoint is impor...

Direct inspection of the sole packaged file confirms automatic install-time credential harvesting and external exfiltration. This is concrete malicious behavior, not a scanner-only infere...

This is concrete, unconsented install-time credential exfiltration, not merely a user-invoked secrets utility. The configurable endpoint does not remove the risk because the package autom...

Source inspection confirms an import-time reverse shell to a hard-coded external endpoint. The benign node file and absence of lifecycle scripts do not mitigate the malicious package entr...

Direct source inspection confirms import-time reconnaissance, exfiltration, and a reverse shell; this is not explained by the declared n8n node functionality. No lifecycle hook is needed...

Direct source inspection confirms concrete import-time discovery, exfiltration, and remote shell behavior. No lifecycle hook is needed because the declared package entrypoint executes the...