Data exfiltration in npm packages.
These packages collect data from the machine they run on, such as host and user details, source files or clipboard contents, and send it to an outside endpoint without consent.
Packages — page 9
424 packages with LPM's own review, newest scan first. Showing 385–424.
The package contains concrete, unconsented install-time shell execution that probes an internal-looking service and exfiltrates retrieved content to an external OAST domain. This is malic...
This is a concrete, default-on, automatic data-collection and external-agent execution chain, not a scanner-only primitive. The benign preinstall guard does not mitigate the runtime exfil...
Direct source inspection confirms an automatic preinstall-time DNS exfiltration of the installer hostname to an OAST endpoint. This is concrete malicious behavior, not a scanner-only infe...