Data exfiltration in npm packages.
These packages collect data from the machine they run on, such as host and user details, source files or clipboard contents, and send it to an outside endpoint without consent.
Packages — page 3
424 packages with LPM's own review, newest scan first. Showing 97–144.
Inspected source establishes automatic host-data collection and transmission upon registry-module loading. The empty default entrypoint limits activation but does not neutralize the execu...
Inspected source proves automatic host-data collection and transmission in a distributed registry module. This is concrete data exfiltration, despite the absence of install hooks and the...
Inspected source implements concrete data collection and transmission unrelated to accessibility management. The attack activates when the registry asset is evaluated, despite the absence...