Data exfiltration in npm packages.
These packages collect data from the machine they run on, such as host and user details, source files or clipboard contents, and send it to an outside endpoint without consent.
Packages — page 4
424 packages with LPM's own review, newest scan first. Showing 145–192.
The install lifecycle loads obfuscated probe code that sends username, hostname, and directory labels through DNS to oob.algamil7x.xyz. That is install-time data exfiltration, independent...
This is an active install-time DNS exfiltration path, not a configuration registry function. The encoded implementation and external endpoint support malicious intent.
This is an automatic, obfuscated DNS exfiltration path unrelated to an ABI library. It activates both at install time and import time without consent.