// Suspicious network destinations

Public-IP HTTP exfiltration

패턴: http-to-public-ip

Packages that POST or GET to a hardcoded public IPv4 literal — not a hostname, not RFC1918 / loopback. Strong indicator of attacker-controlled command-and-control infrastructure.

1개 패키지에 이 패턴이 매칭됨. 최신순.

AUTO-PUBLISHED/npm/2026-05-04
react-dom-helper@1.0.0
by k4nx9zfp82
steals →npm tokenAWS keys
reads-aws-credsreads-npmrcreads-homedirhttp-to-public-ip
→ 크리덴셜 읽기 (reads-aws-creds, reads-npmrc) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.
weekly
—
/wk
llm verdict
malicious

0.95

h-score

83

patterns

4

size

412 B

Public-IP HTTP exfiltration

react-dom-helper@1.0.0