Dynamic eval() execution — 1 caught | Cremit · NHI Credential Stealer Index

AUTO-PUBLISHED/kitchen-sink · 11/npm/2026-06-07

ltcai12 versions·0.1.29→3.1.0

by taesoopark

Lattice AI v3 local-first AI workspace platform with knowledge graph, vector index, hybrid search, agents, and workspace modes.

steals →Seed phrasenpm tokenPyPI tokenGitHub PATAI API keysKeePassDiscord tokensChromium logins

reads-env-varschild-process-spawncurl-pipe-bashpy-sys-platform-branchreads-github-tokensreads-ai-api-keysreads-chromium-credsreads-keepass+18

→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

15.8 MB

versions

AUTO-PUBLISHED/pypi/2026-06-07

domain-admin@1.6.78

by Peng Shiyu

a domain ssl cert admin

steals →Chromium logins→ sends tohttps://pypi.org/simple

child-process-spawnpy-pip-install-runtimereads-env-varspy-requests-postpy-socket-connectlong-base64-literallong-hex-literalclipboard-access+6

→ Encoded payload + dynamic execution combo (event-stream / flatmap-stream shape) — embedded blob decoded and executed at install time. Fast-tracked.

weekly

310

/wk

llm verdict

malicious 0.92

h-score

patterns

size

1.8 MB

versions

211

AUTO-PUBLISHED/kitchen-sink · 21/npm/2026-06-06

@blamejs/exceptd-skills3 versions·0.16.23→0.16.25

by dotcoocoo

AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (439 CVEs / 177 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate,

steals →Crypto walletSeed phrasenpm tokenPyPI tokenCargo credsAWS keysGCP credsAzure credsGitHub PATKubeconfigDocker authSSH keysAI API keysMCP configmacOS Keychain1PasswordSlack tokensChromium logins→ sends tohttps://exceptd.com

clipboard-accessreads-env-varspublic-github-pushchild-process-spawnreads-github-tokensreads-homedirreads-ai-api-keysreads-system-info+26

→ Worm self-propagation: package reads .npmrc _authToken AND invokes npm publish in install-path code. Shai-Hulud-class shape — no legitimate package re-publishes OTHER packages from the user's machine.

weekly

—

/wk

llm verdict

malicious 0.96

h-score

patterns

size

35.0 MB

versions

292

AUTO-PUBLISHED/npm/2026-06-05

@jacob-ebey/almostnode@0.4.0

by jacob-ebey

Node.js in your browser. Just like that.

steals →AI API keysChromium logins→ sends tohttps://github.com/macaly/almostnode.git

public-github-pushreads-ai-api-keysreads-env-varschild-process-spawnreads-chromium-credsbase64-decodeeval-dynamicreads-system-info+2

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

16.7 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@start.dev/almostnode2 versions·0.3.0→0.3.1

by arielweinberger

Node.js in your browser. Just like that.

steals →AI API keysChromium logins→ sends tohttps://github.com/arielweinberger/almostnode.git

public-github-pushreads-ai-api-keysreads-env-varschild-process-spawnreads-chromium-credsbase64-decodeeval-dynamicfunction-constructor+2

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

15.6 MB

versions

AUTO-PUBLISHED/kitchen-sink · 8/npm/2026-06-05

ciphernest2 versions·0.4.0→0.8.4

by vmmuthu31

AI-aware security scanner for VS Code — code vulnerabilities, LLM risks, secrets, dependencies, MCP & agent security

steals →AWS keysAzure credsGitHub PATMCP configAI API keysChromium logins→ sends tohttps://github.com/vmmuthu31/CipherNest.git

public-github-pusheval-dynamicreads-env-varsclipboard-accessreads-github-tokenschild-process-spawnfs-recursive-readreads-aws-creds+7

→ 크리덴셜 읽기 (reads-github-tokens, reads-aws-creds, reads-ai-api-keys, reads-azure-creds) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

24.3 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@yuechou/pi-coding-agent4 versions·15.8.3-patched.1→15.8.3-patched.6

by yuechou

Coding agent CLI with read, bash, edit, write tools and session management

steals →GitHub PATAI API keysChromium logins→ sends tohttps://omp.sh

public-github-pushreads-env-varsreads-homedirreads-ai-api-keysreads-system-inforeads-chromium-credsreads-github-tokensbase64-decode+4

weekly

—

/wk

h-score

patterns

size

10.3 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@ethlete/cli@2.0.1

by ethlete-user

eval-dynamicchild-process-spawn

weekly

—

/wk

h-score

patterns

size

4.4 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@ethlete/theming@2.7.1

by ethlete-user

eval-dynamic

weekly

—

/wk

h-score

patterns

size

4.5 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@ethlete/dsp@0.3.1

by ethlete-user

eval-dynamic

weekly

—

/wk

h-score

patterns

size

4.4 MB

versions

AUTO-PUBLISHED/npm/2026-05-26/MAL-2026-4717

weavedb-console2 versions·0.2.0→0.2.1

by asteroiddao

steals →GCP creds→ sends tohttp://localhost:8000/?canisterId=rwlgt-iiaaa-aaaaa-aaaaa-cai

eval-dynamicreads-gcp-creds

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

1.7 MB

versions

AUTO-PUBLISHED/npm/2026-05-27/MAL-2026-4546

cwao-units@0.8.4

by asteroiddao

`cwao-units` runs [AO compatible units](https://ao.arweave.dev/#/spec) for CosmWasm.

→ sends tohttp://localhost:1984/graphql

eval-dynamicbase64-decode

weekly

—

/wk

h-score

patterns

size

47.3 KB

versions

AUTO-PUBLISHED/npm/2024-09-07/MAL-2026-4486

atomic-notes@0.5.2

by asteroiddao

→ sends tohttps://github.com/facebook/regenerator/blob/main/LICENSE

child-process-spawneval-dynamic

weekly

—

/wk

h-score

patterns

size

382.1 KB

versions

AUTO-PUBLISHED/npm/2024-11-28/MAL-2026-4480

aonote@0.11.0

by asteroiddao

eval-dynamicchild-process-spawn

weekly

—

/wk

h-score

patterns

size

9.9 MB

versions

AUTO-PUBLISHED/npm/2026-05-26/MAL-2026-4476

ai32 versions·0.3.4→0.3.5

by asteroiddao

→ sends tohttps://github.com/facebook/regenerator/blob/main/LICENSE

eval-dynamic

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

/wk

llm verdict

benign 0.85

h-score

patterns

size

1.1 MB

versions

AUTO-PUBLISHED/pypi/2026-06-04

azure-genome@0.1.4

A Python package for Azure Genome.

steals →Chromium logins→ sends tohttps://github.com/python/cpython/pull/119891

py-requests-postreads-env-varseval-dynamicchild-process-spawnreads-homedirreads-system-infowebhook-binpy-socket-connect+6

weekly

/wk

h-score

patterns

size

3.2 MB

versions

AUTO-PUBLISHED/npm/2026-06-04

openclaw-foundry-core@1.0.0

by xdemocle

The forge that forges itself — self-writing meta-extension for OpenClaw

steals →AI API keysChromium logins→ sends tohttps://api.anthropic.com

reads-ai-api-keysreads-chromium-credswebhook-bineval-dynamicfunction-constructorchild-process-spawnreads-env-vars

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

709.6 KB

versions

AUTO-PUBLISHED/pypi/2026-06-04

sealights-python-agent@2.10.10

by Tricentis Sealights

Tricentis Sealights Python Agent - Quality Intelligence and Code Coverage

steals →Chromium logins→ sends tohttps://packaging.python.org/en/latest/distributing.html

py-pip-install-runtimereads-env-varspy-urllib-requestfs-recursive-readreads-homedirreads-system-infowebhook-binpy-socket-connect+8

weekly

11K

/wk

h-score

patterns

size

1.9 MB

versions

175

AUTO-PUBLISHED/npm/2026-06-04

@iola_adm/iola-cli21 versions·0.2.37→0.2.67

by iola_adm

CLI и AI-агент городского округа Йошкар-Ола.

steals →AI API keys→ sends tohttps://github.com/adm-iola/iola-cli#readme

public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

2.8 MB

versions

179

AUTO-PUBLISHED/pypi/2026-06-03

magenta-rt@2.0.2

by Google LLC

Real-time music generation models.

steals →GCP credsAI API keys→ sends tohttp://www.apache.org/licenses/LICENSE-2.0

py-pip-install-runtimereads-env-varsreads-homedireval-dynamicreads-gcp-credsreads-ai-api-keys

weekly

194

/wk

h-score

patterns

size

1.4 MB

versions

AUTO-PUBLISHED/npm/2026-06-03

pokebedrock-showdown@0.1.17

by smell-of-curry

A modified version of the Pokémon Showdown server, designed for PokeBedrock.

steals →Azure credsChromium logins

public-github-pushreads-chromium-credsreads-azure-credschild-process-spawninstall-path-npm-publisheval-dynamicpastebin-domainreads-env-vars

→ 크리덴셜 읽기 (reads-azure-creds) + 외부 전송지 pastebin-domain 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

135.9 MB

versions

AUTO-PUBLISHED/npm/2026-05-28/MAL-2026-4036

@antv/l7-core2 versions·2.25.10→2.28.11

by lzxue

→ sends tohttps://zhuanlan.zhihu.com/p/67484498

eval-dynamic

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

787.5 KB

versions

567

AUTO-PUBLISHED/npm/2026-05-04/MAL-2026-3337

@t-in-one/save_application_hid_to_storage@99.0.7

by t-in-one

tbank utilities

→ sends tohttp://${pkg}.${scope}.${BASE}/poc.js

eval-dynamic

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).

weekly

/wk

llm verdict

benign 0.85

h-score

patterns

size

1.1 KB

versions

AUTO-PUBLISHED/pypi/2026-05-18/MAL-2026-4772

txdpy@2026.5

by 唐旭东

→ sends toapi.fanyi.baidu.com · http://api.fanyi.baidu.com/api/trans/vip/translate?q={q}…

eval-dynamicchild-process-spawnreads-env-varspy-requests-post

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

38.0 KB

versions

AUTO-PUBLISHED/pypi/2026-05-25/MAL-2026-4755

mathepy@7.9.0

Module for Quick Calculations

eval-dynamicpy-requests-postpy-pip-install-runtime

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

49.1 KB

versions

AUTO-PUBLISHED/pypi/2026-05-26/MAL-2026-4748

eplang@8.0.0

EPL - English Programming Language: write code in plain English. Build apps, web servers, and more.

steals →AWS keysGitHub PATChromium logins→ sends tohttp://localhost:11434

child-process-spawnfs-recursive-readpy-pip-install-runtimepy-urllib-requestclipboard-accessreads-github-tokensreads-env-varsreads-homedir+11

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 2 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

952.4 KB

versions

AUTO-PUBLISHED/npm/2026-05-18/MAL-2026-4675

supership-scan@1.1.0

by crestds

Predeploy security scanner for the agent economy. 80+ vulnerability patterns. Runs locally, code never leaves your machine.

steals →AWS keysAI API keysChromium logins→ sends tohttps://github.com/andysalvo/supership-scan.git

public-github-pushreads-env-varsreads-chromium-credseval-dynamicfunction-constructorchild-process-spawnreads-aws-credsreads-ai-api-keys

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

64.0 KB

versions

AUTO-PUBLISHED/npm/2026-05-18/MAL-2026-4665

security-env-loader@3.11.0

by koltinsmith

Loads environment variables from .env file

→ sends tohttps://github.com/yourname/secure-env-loader

public-github-pushreads-env-varsreads-homedireval-dynamic

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

29.9 KB

versions

AUTO-PUBLISHED/npm/2026-05-26/MAL-2026-4784

react-ui-polyfills@1.2.7

by palomakbnc

A lightweight React utility package that provides browser-safe polyfills, UI compatibility helpers, and runtime shims for modern React applications.

eval-dynamic

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

6.2 KB

versions

AUTO-PUBLISHED/npm/2026-05-26/MAL-2026-4791

react-cleaner@1.0.5

by bundrix

Jsonify the structure and output chalk string

→ sends tohttps://www.jsonkeeper.com/b/MYUKZ

child-process-spawnreads-env-varsreads-homedirreads-system-infoeval-dynamic

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

329.4 KB

versions

AUTO-PUBLISHED/npm/2026-05-14/MAL-2026-4628

open-agents-ai@0.187.596

by robit

AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop

steals →Telegram

reads-telegram-dataeval-dynamicpy-pip-install-runtime

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

27.7 MB

versions

1441

AUTO-PUBLISHED/npm/2026-05-26/MAL-2026-4626

omnius@1.0.200

by robit

AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop

steals →Telegram

reads-telegram-datainstall-path-npm-publisheval-dynamicpy-pip-install-runtime

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

29.9 MB

versions

193

AUTO-PUBLISHED/npm/2026-05-25/MAL-2026-4575

happy-dlscord.js@14.16.3

by gk90

A powerful library for interacting with the Discord API

steals →Discord tokens→ sends tohttps://json.schemastore.org/package.json

public-github-pusheval-dynamicchild-process-spawnreads-discord-tokensreads-env-vars

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

1.8 MB

versions

AUTO-PUBLISHED/npm/2024-03-29/MAL-2026-4039

@antv/l7-editor@1.1.13

by yanxiong

Geographic data editing tool based on L7

install-path-npm-publishclipboard-accesseval-dynamicfunction-constructor

weekly

/wk

h-score

patterns

size

1.0 MB

versions