Credential exfiltration in npm packages.
These packages collect secrets such as npm tokens, cloud keys, SSH keys, environment variables or local credential files and send them to a destination the user did not authorize.
Packages — page 4
453 packages with LPM's own review, newest scan first. Showing 145–192.
This is concrete credential and source-data exfiltration through an opaque third-party relay. User interaction does not make forwarding an npm bearer token to that host safe.
The package deliberately routes npm credentials and uploaded content through an opaque third-party endpoint. This is concrete credential and data exfiltration behavior despite requiring a...
The custom Worker receives both the npm bearer token and package payload during normal browser publishing, while an embedded credential increases immediate exposure. This is concrete cred...