new Function() dynamic code — 1 caught | Cremit

AUTO-PUBLISHED/pypi/2026-06-07

domain-admin@1.6.78

by Peng Shiyu

a domain ssl cert admin

steals →Chromium logins→ sends tohttps://pypi.org/simple

child-process-spawnpy-pip-install-runtimereads-env-varspy-requests-postpy-socket-connectlong-base64-literallong-hex-literalclipboard-access+6

→ Encoded payload + dynamic execution combo (event-stream / flatmap-stream shape) — embedded blob decoded and executed at install time. Fast-tracked.

weekly

310

/wk

llm verdict

malicious 0.92

h-score

patterns

size

1.8 MB

versions

211

AUTO-PUBLISHED/npm/2026-06-06

@phi-code-admin/phi-code2 versions·0.76.8→0.76.13

by phi-code-admin

Coding agent CLI with persistent memory, sub-agents, intelligent routing, and orchestration

steals →GitLab PATAI API keysChromium logins

public-github-pushclipboard-accessreads-env-varsreads-homedirreads-ai-api-keysreads-chromium-credschild-process-spawnreads-system-info+4

→ 크리덴셜 읽기 (reads-ai-api-keys, reads-gitlab-tokens) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

weekly

119

/wk

llm verdict

malicious 0.95

h-score

patterns

size

10.6 MB

versions

106

AUTO-PUBLISHED/npm/2026-06-05

@jacob-ebey/almostnode@0.4.0

by jacob-ebey

Node.js in your browser. Just like that.

steals →AI API keysChromium logins→ sends tohttps://github.com/macaly/almostnode.git

public-github-pushreads-ai-api-keysreads-env-varschild-process-spawnreads-chromium-credsbase64-decodeeval-dynamicreads-system-info+2

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

16.7 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@start.dev/almostnode2 versions·0.3.0→0.3.1

by arielweinberger

Node.js in your browser. Just like that.

steals →AI API keysChromium logins→ sends tohttps://github.com/arielweinberger/almostnode.git

public-github-pushreads-ai-api-keysreads-env-varschild-process-spawnreads-chromium-credsbase64-decodeeval-dynamicfunction-constructor+2

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

15.6 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@fleetagent/pi-coding-agent@0.0.8

by tiith

Coding agent CLI with read, bash, edit, write tools and session management

steals →GitLab PATAI API keys→ sends tohttps://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-0.91.1.tgz

clipboard-accesschild-process-spawnreads-env-varsreads-homedirreads-system-infofunction-constructorreads-gitlab-tokensreads-ai-api-keys+1

weekly

138

/wk

h-score

patterns

size

11.4 MB

versions

AUTO-PUBLISHED/npm/2026-05-27/MAL-2026-4715

weavedb-base@0.45.4

by asteroiddao

A decentralized NoSQL database powered by Arweave.

function-constructorbase64-decode

weekly

—

/wk

h-score

patterns

size

65.9 KB

versions

114

AUTO-PUBLISHED/npm/2026-06-04

openclaw-foundry-core@1.0.0

by xdemocle

The forge that forges itself — self-writing meta-extension for OpenClaw

steals →AI API keysChromium logins→ sends tohttps://api.anthropic.com

reads-ai-api-keysreads-chromium-credswebhook-bineval-dynamicfunction-constructorchild-process-spawnreads-env-vars

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

709.6 KB

versions

AUTO-PUBLISHED/npm/2026-06-04

@qaecy/cue-ui2 versions·0.0.23→0.0.25

by madsholten

QAECY UI Web Components

→ sends tohttps://docs.mapbox.com/mapbox-gl-js/guides/install/#transpiling

reads-env-varsbase64-decodechild-process-spawnpastebin-domainfunction-constructorlong-base64-literalclipboard-accesslong-hex-literal+2

→ Encoded payload + dynamic execution combo (event-stream / flatmap-stream shape) — embedded blob decoded and executed at install time. Fast-tracked.

weekly

—

/wk

llm verdict

malicious 0.92

h-score

patterns

size

14.7 MB

versions

AUTO-PUBLISHED/npm/2026-06-03

@boldreports/javascript-reporting-controls@13.1.35

by bold-reports

The Bold Reports by Syncfusion controls for JavaScript contains ReportViewer and ReportDesigner HTML5 and JavaScript reporting controls for enterprise web development

steals →Azure credsChromium logins→ sends tohttps://github.com/boldreports/javascript-reporting-controls.git

public-github-pushreads-chromium-credsclipboard-accessreads-azure-credsfunction-constructorchild-process-spawnhttp-to-public-ip

→ 크리덴셜 읽기 (reads-azure-creds) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

80.0 MB

versions

271

AUTO-PUBLISHED/npm/2026-05-18/MAL-2026-4705

vite-json-config@1.0.5

by harry_stev

Load node modules according to tsconfig paths, in run-time or via API.

→ sends tohttps://www.jsonkeeper.com/b/XB9WY

reads-env-varschild-process-spawnfunction-constructor

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

183.2 KB

versions

AUTO-PUBLISHED/npm/2026-05-18/MAL-2026-4675

supership-scan@1.1.0

by crestds

Predeploy security scanner for the agent economy. 80+ vulnerability patterns. Runs locally, code never leaves your machine.

steals →AWS keysAI API keysChromium logins→ sends tohttps://github.com/andysalvo/supership-scan.git

public-github-pushreads-env-varsreads-chromium-credseval-dynamicfunction-constructorchild-process-spawnreads-aws-credsreads-ai-api-keys

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

64.0 KB

versions

AUTO-PUBLISHED/npm/2026-05-14/MAL-2026-4645

prettier-sdk@1.0.2

by coindefi2026

prettier-sdk is an opinionated code formatter

reads-env-varsreads-homedirreads-system-infochild-process-spawnbase64-decodefunction-constructor

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

8.2 MB

versions

AUTO-PUBLISHED/npm/2026-05-26/MAL-2026-4561

fe-utils-core@1.0.6

by jomarte

Generic frontend utilities for Node.js and browser environments

function-constructor

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

9.6 KB

versions

AUTO-PUBLISHED/npm/2026-05-26/MAL-2026-4399

@kedem/okdb@1.8.15

by kedemd

A fast, type-oriented database — strong consistency and rich indexing at the core, with sync, vector embeddings, full-text search, and AI tooling built in. Designed for the AI era.

steals →Chromium logins

reads-env-varsreads-chromium-credsreads-homedirchild-process-spawnfunction-constructorclipboard-access

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

4.7 MB

versions

AUTO-PUBLISHED/npm/2024-09-06/MAL-2026-4058

@antv/layout-wasm@1.4.2

by iaaron

A WASM binding of rust implementation for graph layout algorithms.

function-constructorchild-process-spawn

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

2.5 MB

versions

AUTO-PUBLISHED/npm/2024-03-29/MAL-2026-4039

@antv/l7-editor@1.1.13

by yanxiong

Geographic data editing tool based on L7

install-path-npm-publishclipboard-accesseval-dynamicfunction-constructor

weekly

/wk

h-score

patterns

size

1.0 MB

versions

AUTO-PUBLISHED/npm/2017-12-15/MAL-2026-3974

@antv/g2-brush@0.0.2

by simaq

Select a one-, two-dimensional or irregular region using the mouse.

→ sends tohttps://zenorocha.github.io/clipboard.js

reads-env-varsclipboard-accessfunction-constructorchild-process-spawnreads-homedir

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

versions

AUTO-PUBLISHED/npm/2023-01-18/MAL-2026-3907

@antv/f6-wx@0.0.7

by openwayne

微信小程序f6组件

steals →Apple/CloudKit

reads-apple-cloudkitchild-process-spawnfunction-constructor

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

2.6 MB

versions