• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• INFOEstablished pre-AI legacy package registered 1532 days ago (predates modern AI hallucination waves).
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in rr-common-base-1.0/rr/shared_utils.py:120
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rr-common-base-1.0/rr/shared_utils.py:98
• HIGHCROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in rr-common-base-1.0/rr/shared_utils.py:110
• HIGHCROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in rr-common-base-1.0/setup.py:19
• INFOSubstantial functional codebase (926 LOC across 6 file(s)).

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in rr-common-base-1.0/rr/shared_utils.py:120
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rr-common-base-1.0/rr/shared_utils.py:98
• CROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in rr-common-base-1.0/rr/shared_utils.py:110
• CROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in rr-common-base-1.0/setup.py:19

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• INFOEstablished pre-AI legacy package registered 1596 days ago (predates modern AI hallucination waves).
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in rr-base-2.9/rr/shared_utils.py:120
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rr-base-2.9/rr/shared_utils.py:98
• HIGHCROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in rr-base-2.9/rr/shared_utils.py:110
• HIGHCROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in rr-base-2.9/setup.py:19
• INFOSubstantial functional codebase (922 LOC across 6 file(s)).

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in rr-base-2.9/rr/shared_utils.py:120
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rr-base-2.9/rr/shared_utils.py:98
• CROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in rr-base-2.9/rr/shared_utils.py:110
• CROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in rr-base-2.9/setup.py:19

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• INFOPublisher email domain '@egenix.com' matches package identifier token 'egenix', verifying identifiable third-party organization ownership.
• INFOEstablished pre-AI legacy package registered 1644 days ago (predates modern AI hallucination waves).
• CRITICALOBFUSCATED_DYNAMIC_ACCESS: Access to '__dict__' detected in egenix_telegram_antispam_bot-0.7.1/setup.py:83
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in egenix_telegram_antispam_bot-0.7.1/telegram_antispam_bot/config_helpers.py:54
• INFOSubstantial functional codebase (796 LOC across 7 file(s)).

• OBFUSCATED_DYNAMIC_ACCESS: Access to '__dict__' detected in egenix_telegram_antispam_bot-0.7.1/setup.py:83
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in egenix_telegram_antispam_bot-0.7.1/telegram_antispam_bot/config_helpers.py:54

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• INFOEstablished pre-AI legacy package registered 1821 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• INFOSubstantial functional codebase (590 LOC across 15 file(s)).

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files-10.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• INFOEstablished pre-AI legacy package registered 1835 days ago (predates modern AI hallucination waves).
• HIGHCROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in base-qualitest-package-1.0.2/setup.py:9
• INFOSubstantial functional codebase (600 LOC across 15 file(s)).

• CROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in base-qualitest-package-1.0.2/setup.py:9

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• INFOEstablished pre-AI legacy package registered 1848 days ago (predates modern AI hallucination waves).
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in base-automation-0.0.8/base_automation/allure_installation.py:10
• HIGHCROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in base-automation-0.0.8/base_automation/upload_artifact.py:32
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in base-automation-0.0.8/base_automation/utilities/shared_utilities.py:14
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in base-automation-0.0.8/base_automation/utilities/shared_utilities.py:48
• HIGHCROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in base-automation-0.0.8/setup.py:19

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in base-automation-0.0.8/base_automation/allure_installation.py:10
• CROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in base-automation-0.0.8/base_automation/upload_artifact.py:32
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in base-automation-0.0.8/base_automation/utilities/shared_utilities.py:14
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in base-automation-0.0.8/base_automation/utilities/shared_utilities.py:48
• CROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in base-automation-0.0.8/setup.py:19

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• INFOPublisher email domain '@alauda.io' matches package identifier token 'alauda', verifying identifiable third-party organization ownership.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• INFOEstablished pre-AI legacy package registered 2700 days ago (predates modern AI hallucination waves).
• CRITICALINSTALL_TIME_EXECUTION: 'eval' executed at top-level in alaudaapi-0.1.1/setup.py:21
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in alaudaapi-0.1.1/setup.py:24
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in alaudaapi-0.1.1/alaudaapi/settings.py:14
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in alaudaapi-0.1.1/alaudaapi/settings.py:14
• INFOSubstantial functional codebase (1020 LOC across 10 file(s)).

• INSTALL_TIME_EXECUTION: 'eval' executed at top-level in alaudaapi-0.1.1/setup.py:21
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in alaudaapi-0.1.1/setup.py:24
• EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in alaudaapi-0.1.1/alaudaapi/settings.py:14
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in alaudaapi-0.1.1/alaudaapi/settings.py:14

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• INFOEstablished pre-AI legacy package registered 2844 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• INFOModerate community usage with 141 monthly downloads.

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_jsonify-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• INFOEstablished pre-AI legacy package registered 2918 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• INFOSubstantial functional codebase (922 LOC across 12 file(s)).

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_rest-10.0.2.2.0-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "console.log('[malwhunter-ci-demo-fixture] inert postinstall — pattern-match test only, no real payload')"'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in package/index.js:22
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:16
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/index.js:11
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/index.js:11

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "console.log('[malwhunter-ci-demo-fixture] inert postinstall — pattern-match test only, no real payload')"'
• MISSING_SOURCE_REPOSITORY_URL
• EXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in package/index.js:22
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:16
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/index.js:11
• SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/index.js:11
• SOURCE_CODE_POTENTIAL_STEALER: potential exfiltration endpoint combined with credential/environment harvesting in package/index.js

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'wechat-claude-skill' matches AI hallucination template [wechat] + [claude] + [skill].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (107 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node dist/setup.js install'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/auth.js:38 (+2 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/pty-server.js:77 (+1 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node dist/setup.js install'
• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/auth.js:38 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/pty-server.js:77 (+1 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/setup.js:213
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/setup.js:430
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/setup.js:51
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/dist/setup.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 188 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.cjs:24
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.cjs:127 (+5 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/postinstall.cjs:155 (+10 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.cjs:42 (+125 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.cjs:24
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.cjs:127 (+5 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/postinstall.cjs:155 (+10 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.cjs:42 (+125 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/chunks/claudeDesktop-DYbyEj18.js:1 (+3 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in package/dist/chunks/dist-es-Bcw5GZko.js:1 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist/chunks/dist-es-BoIJpncb.js:1

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'claude-status' matches AI hallucination template [node] + [claude] + [status].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 223 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/cli.js:2 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/cli.js:8
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:1

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/cli.js:2 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/cli.js:8
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:1
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:38
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'claude-dashboard' matches AI hallucination template [node] + [claude] + [dashboard].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• MEDIUMPackage registered 236 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "import('node:child_process').then(m=>m.execSync('chmod +x node_modules/node-pty/prebuilds/*/spawn-helper')).catch(()=>{})"'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/.next/server/pages/_error.js:8 (+9 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "import('node:child_process').then(m=>m.execSync('chmod +x node_modules/node-pty/prebuilds/*/spawn-helper')).catch(()=>{})"'
• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/.next/server/pages/_error.js:8 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/.next/static/chunks/145-28da47a464f75508.js:1 (+11 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/.next/server/chunks/205.js:9 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'process.binding/mainModule' found in package/.next/static/chunks/255-ebd51be49873d76c.js:1 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/.next/server/chunks/331.js:1
• CREDENTIAL_PATH_HARVESTING: 'macOS Keychain Dump' found in package/dist/src/lib/usage/get-token.js:9 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'claude-voice' matches AI hallucination template [node] + [claude] + [voice].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 256 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/utils/audio.js:45 (+17 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/cli.js:44 (+5 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/cli.js:1612 (+2 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/utils/audio.js:45 (+17 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/cli.js:44 (+5 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/cli.js:1612 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli.js:56 (+11 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/wake-word/index.js:184 (+3 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/scripts/install-hooks.js:14
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• INFOLegitimate documentation effort (248 chars with homepage link).
• HIGHPackage registered recently (37 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/agent.js:38 (+10 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/lib/bg.js:3 (+7 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/bg.js:44 (+1 more occurrence(s) elsewhere)
• HIGHCREDENTIAL_PATH_HARVESTING: 'Browser Vaults & Password Databases' found in package/bin/emp.js:164

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/agent.js:38 (+10 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/lib/bg.js:3 (+7 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/bg.js:44 (+1 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'Browser Vaults & Password Databases' found in package/bin/emp.js:164
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/bin/emp.js:2402 (+5 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/emp-web/dist/assets/index-BWhHhh7u.js:1
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/lib/revert.js:192 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (40 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.cjs'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.cjs:10 (+20 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/core/agent-session.js:481 (+76 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist/core/auth-storage.js:314 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/bundle/chunk-AZX6YE6D.js:1190 (+5 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/bundle/chunk-EBIKTZ7C.js:30 (+3 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.cjs'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.cjs:10 (+20 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/core/agent-session.js:481 (+76 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist/core/auth-storage.js:314 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/bundle/chunk-AZX6YE6D.js:1190 (+5 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/bundle/chunk-EBIKTZ7C.js:30 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/bundle/chunk-ENTVCTJV.js:6679 (+4 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/bundle/chunk-ENTVCTJV.js:1619 (+7 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('DEEPSEEK').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 277 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "const fs=require('fs');['dist/bin/deepseek.js','dist/bin/erosolar.js','dist/bin/lean.js'].forEach(f=>{try{fs.chmodSync(f,0o755)}catch{}})"'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/core/agent.js:1278 (+42 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/core/antiTermination.js:159
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/core/antiTermination.js:160 (+8 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "const fs=require('fs');['dist/bin/deepseek.js','dist/bin/erosolar.js','dist/bin/lean.js'].forEach(f=>{try{fs.chmodSync(f,0o755)}catch{}})"'
• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/core/agent.js:1278 (+42 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/core/antiTermination.js:159
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/core/antiTermination.js:160 (+8 more occurrence(s) elsewhere)
• SYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in package/dist/capabilities/eliteCryptoMilitaryCapability.js:604
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/core/embeddingProviders.js:35 (+5 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/core/hooks.js:19

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 317 days ago within the 1-year AI tool proliferation window.
• MEDIUMPackage registered with suspiciously high major version (v7.3.14, major 7) despite recent registration (317 days ago, 123 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> '(npm rebuild better-sqlite3 || echo [CCW] better-sqlite3 rebuild skipped) && (npm rebuild node-pty || echo [CCW] node-pty rebuild skipped)'
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/ccw/dist/core/a2ui/A2UIWebSocketHandler.js:8 (+54 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/ccw/dist/core/services/api-key-tester.js:61 (+20 more occurrence(s) elsewhere)
• HIGHANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/ccw/dist/utils/browser-launcher.js:56

• LIFECYCLE_SCRIPT: 'postinstall' -> '(npm rebuild better-sqlite3 || echo [CCW] better-sqlite3 rebuild skipped) && (npm rebuild node-pty || echo [CCW] node-pty rebuild skipped)'
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/ccw/dist/core/a2ui/A2UIWebSocketHandler.js:8 (+54 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/ccw/dist/core/services/api-key-tester.js:61 (+20 more occurrence(s) elsewhere)
• ANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/ccw/dist/utils/browser-launcher.js:56
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/ccw/dist/core/claude-freshness.js:35 (+13 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/ccw/dist/core/services/cli-session-command-builder.js:52
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/ccw/frontend/dist/assets/HookManagerPage-C1rfGhuM.js:6 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/ccw/frontend/dist/assets/index-D7QzOH1Y.js:522

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• INFOPackage lineage verified as trusted vendor 'microsoft' via domain:github.com.
• INFOLegitimate documentation effort (213 chars with homepage link).
• HIGHPackage registered recently (24 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node ./scripts/install-yt-dlp.mjs --postinstall'
• HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/index-B5Q6_O_-.cjs:1 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index-B5Q6_O_-.cjs:1 (+1 more occurrence(s) elsewhere)
• HIGHSUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/index-B5Q6_O_-.cjs:1 (+1 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./scripts/install-yt-dlp.mjs --postinstall'
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/index-B5Q6_O_-.cjs:1 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index-B5Q6_O_-.cjs:1 (+1 more occurrence(s) elsewhere)
• SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/index-B5Q6_O_-.cjs:1 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/grab-url-cli.cjs.js:2
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/grab-url-cli.cjs.js:2 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/grab-url-cli.cjs.js:2 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/grab-url-cli.cjs.js:2 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (72 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.cjs:24
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.cjs:127 (+5 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/postinstall.cjs:155 (+10 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.cjs:42 (+128 more occurrence(s) elsewhere)
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/chunks/claudeDesktop-D0IJAz2O.js:1 (+3 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.cjs:24
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.cjs:127 (+5 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/postinstall.cjs:155 (+10 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.cjs:42 (+128 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/chunks/claudeDesktop-D0IJAz2O.js:1 (+3 more occurrence(s) elsewhere)
• ANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/dist/chunks/dist-BmOO88FP.js:20 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist/chunks/dist-es-isqRH-4e.js:1

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (126 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node ./bin/postinstall.js'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/claude-tracker.js:18 (+6 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/claude-tracker.js:109 (+6 more occurrence(s) elsewhere)
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/bin/claude-tracker.js:121 (+1 more occurrence(s) elsewhere)
• CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/bin/claude-tracker.js (+1 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./bin/postinstall.js'
• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/claude-tracker.js:18 (+6 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/claude-tracker.js:109 (+6 more occurrence(s) elsewhere)
• SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/bin/claude-tracker.js:121 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/bin/claude-tracker.js (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/poller.js:20 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/poller.js:64 (+3 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('OLLAMA').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (157 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "require('fs').copyFileSync('node_modules/marked/lib/marked.umd.js','ui/marked.min.js')"'
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/tools/agentManagementTools.js:52 (+31 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/jarvis/ambientDaemon.js:61 (+8 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/ui/app.js:218 (+17 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/core/deterministicShortcuts.js:57

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "require('fs').copyFileSync('node_modules/marked/lib/marked.umd.js','ui/marked.min.js')"'
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/tools/agentManagementTools.js:52 (+31 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/jarvis/ambientDaemon.js:61 (+8 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/ui/app.js:218 (+17 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/core/deterministicShortcuts.js:57
• SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/extensibility/mcpRuntime.js:300
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/core/ollamaClient.js:8
• SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/tools/pdfTool.js:52

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name '@nirholas/lyra-web3-playground' matches AI hallucination template [node] + [web3] + [lyra-web3-playground].
• HIGHClaims critical enterprise brand identity ('WEB3').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 199 days ago within the 1-year AI tool proliferation window.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/server/src/services/ai.ts:10 (+10 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/services/api.ts:26 (+8 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/src/services/lyraCompiler.ts:151
• CRITICALSOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/src/services/lyraCompiler.ts

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/server/src/services/ai.ts:10 (+10 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/services/api.ts:26 (+8 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/src/services/lyraCompiler.ts:151
• SOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/src/services/lyraCompiler.ts
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/src/data/tutorials.ts:1305
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/x402-facilitator/src/middleware/validate.ts:71 (+2 more occurrence(s) elsewhere)
• SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/x402-facilitator/src/middleware/validate.ts:71 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/src/utils/watermark.ts:58

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'phantom-cli' matches AI hallucination template [node] + [phantom] + [cli].
• HIGHClaims critical enterprise brand identity ('PHANTOM').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node scripts/check-platform.js'
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/download-binary.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/download-binary.js:39 (+2 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/download-binary.js:1
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/publish-all.js:32

• LIFECYCLE_SCRIPT: 'preinstall' -> 'node scripts/check-platform.js'
• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/download-binary.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/download-binary.js:39 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/download-binary.js:1
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/publish-all.js:32
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/download-binary.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'opencode-local-ollama' matches AI hallucination template [opencode] + [ollama] + [ollama].
• HIGHClaims critical enterprise brand identity ('OLLAMA').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (157 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/ollama.js:44 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.js:26

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/ollama.js:44 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.js:26
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/postinstall.js:12
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'infinicode-ollama' matches AI hallucination template [node] + [ollama] + [infinicode].
• HIGHClaims critical enterprise brand identity ('OLLAMA').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 210 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node ./scripts/install.js'
• HIGHBUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/opencode-ollama-win-amd64.exe' in npm tarball
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/cli.js:3 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/cli.js:38

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./scripts/install.js'
• BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/opencode-ollama-win-amd64.exe' in npm tarball
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/cli.js:3 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/cli.js:38
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/install.js:3
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'claude-gym' matches AI hallucination template [node] + [claude] + [gym].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 214 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/install.js:6
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/install.js:127
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/install.js:3

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/install.js:6
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/install.js:127
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/install.js:3
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'claude-explorer' matches AI hallucination template [node] + [claude] + [explorer].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 236 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/cli.js:5
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/cli.js:11
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:3

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/cli.js:5
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/cli.js:11
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:3
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:11
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'claude-quest' matches AI hallucination template [node] + [claude] + [quest].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 257 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/install.js:6
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/install.js:122
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/install.js:3

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/install.js:6
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/install.js:122
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/install.js:3
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'google-chrome' matches AI hallucination template [node] + [google] + [chrome].
• HIGHClaims critical enterprise brand identity ('GOOGLE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• INFOEstablished pre-AI legacy package registered 1066 days ago (predates modern AI hallucination waves).
• HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'which node && node -v && node update.js'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/update.js:57
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/update.js:14

• LIFECYCLE_SCRIPT: 'preinstall' -> 'which node && node -v && node update.js'
• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/update.js:57
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/update.js:14
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/update.js:13
• SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/update.js:83
• SYSTEM_PERSISTENCE_TAMPERING: 'Cron Job Installation / Tampering' found in package/update.js:83
• INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/update.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (14 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node server/install.js'
• HIGHLIFECYCLE_SCRIPT: 'postuninstall' -> 'node server/uninstall.js'
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/extension/activity.js:284 (+6 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/extension/automation.js:936
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/server/cli.js:93 (+3 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/server/cli.js:1400

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node server/install.js'
• LIFECYCLE_SCRIPT: 'postuninstall' -> 'node server/uninstall.js'
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/extension/activity.js:284 (+6 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/extension/automation.js:936
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/server/cli.js:93 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/server/cli.js:1400
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/server/cli.js:29 (+11 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/server/runtime-worker.js:155

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (52 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/app/lib/agent.js:17 (+8 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/app/lib/agent.js:116 (+5 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/lib/agent.js:20 (+17 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/bin/agents-chat.js:21 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/bin/agents-chat.js:429 (+5 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/app/lib/agent.js:17 (+8 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/app/lib/agent.js:116 (+5 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/lib/agent.js:20 (+17 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/bin/agents-chat.js:21 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/bin/agents-chat.js:429 (+5 more occurrence(s) elsewhere)
• SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/bin/agents-chat.js:517
• SYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in package/bin/agents-chat.js:464

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('DEEPSEEK').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• INFOLegitimate documentation effort (254 chars with homepage link).
• HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/engine/package/acquire.js:37 (+2 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/engine/package/acquire.js:17 (+5 more occurrence(s) elsewhere)
• HIGHCREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in package/engine/supplychain/fetch.js:34 (+3 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/engine/semantic/harness.js:205 (+1 more occurrence(s) elsewhere)

• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/engine/package/acquire.js:37 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/engine/package/acquire.js:17 (+5 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in package/engine/supplychain/fetch.js:34 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/engine/semantic/harness.js:205 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/engine/report.js:72 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/engine/report.js:72 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/engine/report.js (+1 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in package/engine/rules.js:199

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name '@bluevs/vhcli-google-ads' matches AI hallucination template [node] + [google] + [vhcli-google-ads].
• HIGHClaims critical enterprise brand identity ('GOOGLE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (74 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'bash $(npm root -g)/@bluevs/vhcli-google-ads/skills/gcli/scripts/install-skill.sh 2>&1 || echo '⚠️ skill auto-sync skipped (likely permission/container env). Run manually: bash $(npm root -g)/@bluevs/vhcli-google-ads/skills/gcli/scripts/install-skill.sh''
• CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/run.js:2
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/run.js:42

• LIFECYCLE_SCRIPT: 'postinstall' -> 'bash $(npm root -g)/@bluevs/vhcli-google-ads/skills/gcli/scripts/install-skill.sh 2>&1 || echo '⚠️ skill auto-sync skipped (likely permission/container env). Run manually: bash $(npm root -g)/@bluevs/vhcli-google-ads/skills/gcli/scripts/install-skill.sh''
• SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/run.js:2
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/run.js:42

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (97 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/unpack-tools.cjs'
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/AcpBackend-fOflLDhG.cjs:409 (+41 more occurrence(s) elsewhere)
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/api-C-_Pphts.cjs:3770 (+3 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/api-C-_Pphts.cjs:17 (+13 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/api-C-_Pphts.cjs:2002 (+19 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/api-C-_Pphts.cjs:1700 (+8 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/unpack-tools.cjs'
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/AcpBackend-fOflLDhG.cjs:409 (+41 more occurrence(s) elsewhere)
• EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/api-C-_Pphts.cjs:3770 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/api-C-_Pphts.cjs:17 (+13 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/api-C-_Pphts.cjs:2002 (+19 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/api-C-_Pphts.cjs:1700 (+8 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/api-C-_Pphts.cjs:1187 (+13 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/dist/cliMain-DQZT3unp.cjs:4333 (+3 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'claude-nonstop' matches AI hallucination template [node] + [claude] + [nonstop].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (110 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/remote/channel-manager.cjs:30 (+8 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/remote/hook-notify.cjs:26 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/remote/hook-notify.cjs:198 (+6 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/remote/channel-manager.cjs:30 (+8 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/remote/hook-notify.cjs:26 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/remote/hook-notify.cjs:198 (+6 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/remote/hook-notify.cjs:210 (+2 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/bin/claude-nonstop.js:1491
• CREDENTIAL_PATH_HARVESTING: 'macOS Keychain Dump' found in package/lib/keychain.js:4
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/keychain.js:302 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'llama-sidecar' matches AI hallucination template [node] + [llama] + [sidecar].
• HIGHClaims critical enterprise brand identity ('LLAMA').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• HIGHPackage registered recently (168 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/index.mjs'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/index.mjs:522
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.mjs:143 (+1 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/index.mjs'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/index.mjs:522
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.mjs:143 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/index.mjs:390
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/index.mjs, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/unpack-tools.cjs'
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/AcpBackend-CVzOYAar.cjs:404 (+22 more occurrence(s) elsewhere)
• HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/dist/api-CjtP4EE0.cjs:2399 (+3 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/api-CjtP4EE0.cjs:16 (+11 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/api-CjtP4EE0.cjs:2292 (+14 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/api-CjtP4EE0.cjs:1227 (+1 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/unpack-tools.cjs'
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/AcpBackend-CVzOYAar.cjs:404 (+22 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/dist/api-CjtP4EE0.cjs:2399 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/api-CjtP4EE0.cjs:16 (+11 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/api-CjtP4EE0.cjs:2292 (+14 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/api-CjtP4EE0.cjs:1227 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/api-CjtP4EE0.cjs:487 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/api-CjtP4EE0.cjs:5397 (+3 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'xy-deepseek-pet' matches AI hallucination template [xy] + [deepseek] + [pet].
• HIGHClaims critical enterprise brand identity ('DEEPSEEK').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (50 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/lib/client.js:1588 (+3 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/lib/index.js:724
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/index.js:4598 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/lib/index.js:546

• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/lib/client.js:1588 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/lib/index.js:724
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/index.js:4598 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/lib/index.js:546
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/index.js:415 (+2 more occurrence(s) elsewhere)
• SYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in package/lib/index.js:4646
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/lib/index.js

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• INFOLegitimate documentation effort (255 chars with homepage link).
• HIGHPackage registered recently (18 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/adapters/opencode.js:101 (+18 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/adapters/opencode.js:29 (+25 more occurrence(s) elsewhere)
• HIGHCREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in package/autonomy.mjs:901 (+2 more occurrence(s) elsewhere)
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/autonomy.mjs:628 (+4 more occurrence(s) elsewhere)
• HIGHCREDENTIAL_PATH_HARVESTING: 'macOS Keychain Dump' found in package/scripts/build-plugin.mjs:54 (+1 more occurrence(s) elsewhere)

• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/adapters/opencode.js:101 (+18 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/adapters/opencode.js:29 (+25 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in package/autonomy.mjs:901 (+2 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/autonomy.mjs:628 (+4 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'macOS Keychain Dump' found in package/scripts/build-plugin.mjs:54 (+1 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'SSH Private Keys (~/.ssh)' found in package/guard.mjs:691 (+2 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/guard.mjs:691 (+2 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'Infrastructure & DB Credentials (~/.terraform.d, ~/.vault-token, ~/.pgpass, ~/.netrc)' found in package/guard.mjs:878 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (25 days ago) during the active AI hallucination slopsquatting wave.
• HIGHPackage registered with suspiciously high major version (v43.3.3, major 43) despite recent registration (25 days ago, 4 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/cli.js:3 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:38
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:5
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:23

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/cli.js:3 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:38
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:5
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:23
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (109 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node npm/download.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/npm/cli.js:8 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/npm/download.js:62
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/npm/download.js:10
• CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/npm/download.js, which makes network calls and executes/decodes/reads secrets

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node npm/download.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/npm/cli.js:8 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/npm/download.js:62
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/npm/download.js:10
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/npm/download.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('GEMINI').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (104 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:4 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.js:162
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:5 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.js:74 (+1 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:4 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.js:162
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:5 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.js:74 (+1 more occurrence(s) elsewhere)
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('GROK').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (106 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:4 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.js:161
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:5 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.js:74 (+1 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:4 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.js:161
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:5 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.js:74 (+1 more occurrence(s) elsewhere)
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('COPILOT').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (122 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:4 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.js:166
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:5 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.js:74 (+1 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:4 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.js:166
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:5 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.js:74 (+1 more occurrence(s) elsewhere)
• INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (152 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/src/autostart.js:23 (+6 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/autostart.js:42 (+3 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/bin/ccs.js:4 (+5 more occurrence(s) elsewhere)
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in package/scripts/postinstall.js:35

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/src/autostart.js:23 (+6 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/autostart.js:42 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/bin/ccs.js:4 (+5 more occurrence(s) elsewhere)
• SYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in package/scripts/postinstall.js:35
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/scripts/postinstall.js
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/utils.js:8

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'lgmmo-claude-installer' matches AI hallucination template [lgmmo] + [claude] + [installer].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (173 days ago) during the active AI hallucination slopsquatting wave.
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/index.js:174
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/index.js:189
• CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/index.js

• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/index.js:174
• SYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/index.js:189
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/index.js

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 182 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/executors/a2a.js:53 (+14 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/executors/a2a.js:21 (+34 more occurrence(s) elsewhere)
• HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Private Keys (~/.ssh)' found in package/src/cli.js:14313
• HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/src/cli.js:14313
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/src/cli.js:26 (+9 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/executors/a2a.js:53 (+14 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/executors/a2a.js:21 (+34 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'SSH Private Keys (~/.ssh)' found in package/src/cli.js:14313
• CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/src/cli.js:14313
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/src/cli.js:26 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/cli.js:1487 (+6 more occurrence(s) elsewhere)
• SYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/src/cli.js:15310

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'lgshop-claude-installer' matches AI hallucination template [lgshop] + [claude] + [installer].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (180 days ago) during the active AI hallucination slopsquatting wave.
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/index.js:73
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/index.js:81
• CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/index.js

• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/index.js:73
• SYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/index.js:81
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/index.js

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →