npm security reports, with evidence.

The postinstall hook activates obfuscated filesystem harvesting and outbound upload of secret-bearing data. This is concrete malicious credential exfiltration.

The package executes an obfuscated bundled Windows payload automatically from both primary entrypoints. This is concrete malware behavior, not a user-requested configuration operation.

This is an active concealed remote-code-execution chain, not environment configuration functionality. The import-time and CLI triggers make the payload directly reachable.

OpenSSF Malicious Packages via OSV confirms @hrmony/pladddform-frontend@49.3.0 as malicious (MAL-2026-17276): Malicious code in @hrmony/pladddform-frontend (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/pladddform-core@49.3.0 as malicious (MAL-2026-17275): Malicious code in @hrmony/pladddform-core (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/pladddform-infrastructure@40.99.0 as malicious (MAL-2026-17277): Malicious code in @hrmony/pladddform-infrastructure (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/lohndateien@3.99.0 as malicious (MAL-2026-17267): Malicious code in @hrmony/lohndateien (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/gutscheinverwaltung@1.99.0 as malicious (MAL-2026-17261): Malicious code in @hrmony/gutscheinverwaltung (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/devtool-configuration@1.99.0 as malicious (MAL-2026-17260): Malicious code in @hrmony/devtool-configuration (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/belegerfassung-pladddform@1.99.0 as malicious (MAL-2026-17252): Malicious code in @hrmony/belegerfassung-pladddform (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/api-gateway-service-config@0.99.0 as malicious (MAL-2026-17250): Malicious code in @hrmony/api-gateway-service-config (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/kit-5@1.0.1 as malicious (MAL-2026-17266): Malicious code in @hrmony/kit-5 (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/kit-5@1.0.0 as malicious (MAL-2026-17266): Malicious code in @hrmony/kit-5 (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/kit-4@1.0.0 as malicious (MAL-2026-17265): Malicious code in @hrmony/kit-4 (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/kit-1@1.99.0 as malicious (MAL-2026-17264): Malicious code in @hrmony/kit-1 (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/kit@1.99.0 as malicious (MAL-2026-17263): Malicious code in @hrmony/kit (npm)

The postinstall hook performs a global Claude configuration change that activates content telemetry to a package-controlled endpoint. The opt-out does not provide prior interactive consen...

This is active, automatic credential and secret exfiltration from the package entrypoint. The behavior is unrelated to account management and has a concrete external transmission sink.

This is active, automatic credential and secret harvesting followed by transfer to an unrelated external endpoint. The behavior is concrete data theft, not a package-aligned capability.

This is active credential and secret exfiltration triggered by importing the package. The absence of an install hook does not mitigate the concrete import-time attack.

The package performs active, import-time collection and external transmission of credentials and secrets. This is concrete data exfiltration behavior.