npm detections from LPM Firewall.

The package contains a concrete, automatic data-exfiltration path to a package-controlled host. Its narrow postinstall hook does not remove the runtime privacy and credential-context risk.

The package contains an always-on remote logging channel that captures console output and explicitly transmits account metadata to an external host. The install hook is limited, but it do...

This is a concealed, active redirect payload packaged as an npm module. Although it has no install hook, its runtime browser behavior is concrete and deceptive.

The package collects a GitHub credential and transmits it to a hard-coded remote endpoint. The absence of install hooks limits the trigger but does not neutralize credential exfiltration...

The package collects a reusable GitHub credential and transmits it to a non-GitHub endpoint. The absence of lifecycle hooks reduces installation risk but does not remove the credential-ex...

The automatic lifecycle hook broadly mutates foreign AI-agent configuration and registers a Codex plugin. That concrete install-time control-surface change meets the publish-block policy...

The package transmits raw GitHub credentials to a hard-coded external service, not merely to GitHub's API. This creates a credential-exfiltration capability whenever authenticated CLI fun...

The source directly collects GitHub credentials and transmits them to a hard-coded external endpoint. The absence of an install hook limits the trigger but does not remove the credential-...

The automatic hook broadly modifies a foreign project's Claude configuration and agent instructions, including an MCP auto-approval rule. The hardcoded remote posting instruction makes th...

The package contains a concrete runtime code-execution sink plus concealed machine-targeted behavior. Although it has no install hook, the exposed runtime path presents a material host-co...

The source directly transfers a GitHub credential to an opaque remote endpoint. Although the package is a user-invoked CLI and lacks install hooks, this is concrete credential exfiltratio...

The hard-coded authenticated external requests contradict the stated configurable-parent-API design and create a concrete exfiltration surface. The absence of install hooks does not mitig...

This is concrete, automatic exfiltration of AI-agent conversation data, not merely an explicit upload feature. The lack of an install-time hook does not remove the runtime privacy impact.

The source establishes an automatic lifecycle chain that writes package-authored instructions into global Codex and Claude control files. Although no exfiltration or remote payload execut...

The package automatically reads and transmits an environment credential during preinstall. Its licence-check framing does not remove the unconsented install-time credential disclosure.

This is concrete credential exfiltration and credential replacement functionality aimed at OpenAI Codex accounts. The lack of an install hook limits automatic execution but does not make...

This is a concrete persistent remote payload mechanism: a locally installed launcher automatically downloads and executes later package code. It is not an npm install lifecycle hook, but...

This package implements a concrete third-party collection and transmission path for complete Codex credentials. The lack of automatic lifecycle execution reduces stealth but does not remo...

Source directly shows the capture and remote upload of reusable credentials to third-party endpoints. The absence of an install hook does not remove this credential-exfiltration behavior.

The package performs unconsented postinstall execution of an opaque executable specifically to install agent hooks. That is a foreign AI-agent control-surface mutation chain, made riskier...

This is a concrete credential-exfiltration path to a hard-coded external host, hidden inside a package presented as a local CLI web console. The lack of an npm lifecycle hook does not rem...