npm security reports, with evidence.

OpenSSF Malicious Packages via OSV confirms @hrmony/kit-1@1.99.0 as malicious (MAL-2026-17264): Malicious code in @hrmony/kit-1 (npm)

OpenSSF Malicious Packages via OSV confirms @hrmony/kit@1.99.0 as malicious (MAL-2026-17263): Malicious code in @hrmony/kit (npm)

The postinstall hook performs a global Claude configuration change that activates content telemetry to a package-controlled endpoint. The opt-out does not provide prior interactive consen...

This is active, automatic credential and secret exfiltration from the package entrypoint. The behavior is unrelated to account management and has a concrete external transmission sink.

This is active, automatic credential and secret harvesting followed by transfer to an unrelated external endpoint. The behavior is concrete data theft, not a package-aligned capability.

This is active credential and secret exfiltration triggered by importing the package. The absence of an install hook does not mitigate the concrete import-time attack.

The package performs active, import-time collection and external transmission of credentials and secrets. This is concrete data exfiltration behavior.

This is active import-time credential and secret exfiltration to an unrelated hard-coded endpoint. The absence of an install hook does not mitigate the malicious runtime behavior.

The active entrypoint implements automatic credential and secret harvesting with an external transmission sink. This is concrete data exfiltration behavior.

The entrypoint performs active, unconsented credential and secret harvesting followed by external transmission. This is concrete data exfiltration, not a package-aligned capability.

This is active, automatic credential and secret exfiltration from cloud and local execution environments. The behavior is directly reachable through the declared package entrypoint.

This is active, automatic credential and secret exfiltration through the package entrypoint. The external destination is unrelated to the local AWS metadata and Kubernetes secret sources.

The source implements active, automatic collection of sensitive cloud and local secrets followed by export to an unrelated endpoint. The behavior is malicious data exfiltration.

The package contains active, import-triggered collection and external transmission of cloud credentials and local secrets. This is concrete credential and data exfiltration.

This is active, automatic credential and secret exfiltration from the package entry point. The behavior is concrete malware rather than a guarded administrative capability.

The package's active main entrypoint automatically collects sensitive cloud and local secrets and transmits them to an unrelated external endpoint. This is concrete malicious data exfiltr...

The active import-time entry point harvests credentials and sensitive runtime data and exfiltrates it to an unrelated external host. This is concrete credential and data exfiltration beha...

Active import-time collection and export of cloud credentials, environment variables, and Kubernetes secrets is concrete malicious behavior. The absence of an install hook does not reduce...

The active entrypoint implements unconsented credential and secret collection followed by transmission to an unrelated hard-coded endpoint. This is concrete data exfiltration behavior.

The active entrypoint implements automatic secret collection and export to an unrelated external host. This is concrete credential and data exfiltration.