npm advisory reports, with evidence.

The package performs active, import-time collection and external transmission of credentials and secrets. This is concrete data exfiltration behavior.

This is active import-time credential and secret exfiltration to an unrelated hard-coded endpoint. The absence of an install hook does not mitigate the malicious runtime behavior.

The active entrypoint implements automatic credential and secret harvesting with an external transmission sink. This is concrete data exfiltration behavior.

The entrypoint performs active, unconsented credential and secret harvesting followed by external transmission. This is concrete data exfiltration, not a package-aligned capability.

This is active, automatic credential and secret exfiltration from cloud and local execution environments. The behavior is directly reachable through the declared package entrypoint.

This is active, automatic credential and secret exfiltration through the package entrypoint. The external destination is unrelated to the local AWS metadata and Kubernetes secret sources.

The source implements active, automatic collection of sensitive cloud and local secrets followed by export to an unrelated endpoint. The behavior is malicious data exfiltration.

The package contains active, import-triggered collection and external transmission of cloud credentials and local secrets. This is concrete credential and data exfiltration.

This is active, automatic credential and secret exfiltration from the package entry point. The behavior is concrete malware rather than a guarded administrative capability.

The package's active main entrypoint automatically collects sensitive cloud and local secrets and transmits them to an unrelated external endpoint. This is concrete malicious data exfiltr...

The active import-time entry point harvests credentials and sensitive runtime data and exfiltrates it to an unrelated external host. This is concrete credential and data exfiltration beha...

Active import-time collection and export of cloud credentials, environment variables, and Kubernetes secrets is concrete malicious behavior. The absence of an install hook does not reduce...

The active entrypoint implements unconsented credential and secret collection followed by transmission to an unrelated hard-coded endpoint. This is concrete data exfiltration behavior.

The active entrypoint implements automatic secret collection and export to an unrelated external host. This is concrete credential and data exfiltration.

The active entrypoint contains automatic harvesting and outbound transmission of credentials and secrets to an unrelated external endpoint. This is concrete malicious behavior.

The entrypoint contains an automatic, concrete secret-harvesting and external transmission chain. The absence of an install hook does not remove the import-time exfiltration behavior.

The active entrypoint implements unconsented credential and secret collection followed by external transmission. This is concrete data exfiltration, not a dormant capability.

The package contains an active, automatic secret-harvesting and external-exfiltration routine in its main entrypoint. The absence of an install hook does not mitigate execution when the p...

Active import-time collection and export of cloud and local secrets is concrete credential exfiltration. The package should be blocked.

The active entry point automatically harvests sensitive cloud and local secret material and sends it to an unrelated external endpoint. This is concrete malicious credential and data exfi...

The package contains active automatic collection and external transmission of cloud credentials and local secrets. This is concrete credential and data exfiltration behavior.