Static pattern: install-path-npm-publish — 1 caught | Cremit

AUTO-PUBLISHED/kitchen-sink · 11/npm/2026-06-07

ltcai12 versions·0.1.29→3.1.0

by taesoopark

Lattice AI v3 local-first AI workspace platform with knowledge graph, vector index, hybrid search, agents, and workspace modes.

steals →Seed phrasenpm tokenPyPI tokenGitHub PATAI API keysKeePassDiscord tokensChromium logins

reads-env-varschild-process-spawncurl-pipe-bashpy-sys-platform-branchreads-github-tokensreads-ai-api-keysreads-chromium-credsreads-keepass+18

→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

15.8 MB

versions

AUTO-PUBLISHED/kitchen-sink · 21/npm/2026-06-06

@blamejs/exceptd-skills3 versions·0.16.23→0.16.25

by dotcoocoo

AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (439 CVEs / 177 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate,

steals →Crypto walletSeed phrasenpm tokenPyPI tokenCargo credsAWS keysGCP credsAzure credsGitHub PATKubeconfigDocker authSSH keysAI API keysMCP configmacOS Keychain1PasswordSlack tokensChromium logins→ sends tohttps://exceptd.com

clipboard-accessreads-env-varspublic-github-pushchild-process-spawnreads-github-tokensreads-homedirreads-ai-api-keysreads-system-info+26

→ Worm self-propagation: package reads .npmrc _authToken AND invokes npm publish in install-path code. Shai-Hulud-class shape — no legitimate package re-publishes OTHER packages from the user's machine.

weekly

—

/wk

llm verdict

malicious 0.96

h-score

patterns

size

35.0 MB

versions

292

AUTO-PUBLISHED/kitchen-sink · 9/npm/2026-06-05

claws-code@0.8.6

by neunaha

Claws — Terminal Control Bridge for VS Code. One command to install.

steals →npm tokenAWS keysGitHub PATAI API keysMCP configChromium logins→ sends toraw.githubusercontent.com · https://raw.githubusercontent.com/neunaha/claws/main/scr…

reads-env-varsreads-aws-credsreads-npmrcreads-github-tokensreads-ai-api-keysreads-homedirchild-process-spawninstall-path-npm-publish+8

weekly

—

/wk

llm verdict

malicious 0.96

h-score

patterns

size

13.6 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

free-email-domains3 versions·1.9.22→1.9.26

by kikobeats

A comprehensive list of all free email domain providers

steals →Chromium logins→ sends tohttps://github.com/Kikobeats/free-email-domains

reads-chromium-credswebhook-binarchive-then-uploadclipboard-accesspublic-github-pushinstall-path-npm-publish

weekly

—

/wk

h-score

patterns

size

202.6 KB

versions

106

AUTO-PUBLISHED/npm/2026-06-04

@trackunit/iris-app2 versions·2.0.5→2.0.6

by tu-publisher

The `@trackunit/iris-app` package is a plugin for [NX by @nrwl](https://nx.dev/). This plugin adds some helpful generators used to set up a Trackunit Iris App project.

steals →npm tokenMCP config

reads-npmrcreads-env-varsreads-mcp-configinstall-path-npm-publishdest-via-hostname-var

weekly

—

/wk

llm verdict

malicious 0.96

h-score

patterns

size

435.5 KB

versions

1076

AUTO-PUBLISHED/npm/2026-06-04

verce2vue2test@0.1.0

by semo0527

This template should help get you started developing with Vue 3 in Vite.

steals →npm token→ sends tohttps://registry.npmjs.org

install-path-npm-publishhttp-to-public-ipclipboard-accesschild-process-spawnreads-npmrc

weekly

—

/wk

llm verdict

malicious 0.96

h-score

patterns

size

2.1 MB

versions

AUTO-PUBLISHED/npm/2026-06-04

cli-jaw@2.1.3

by bitkyc08

Personal AI assistant powered by Antigravity, AI-E, Claude, Claude E, Codex, Codex App, Cursor, Gemini, Grok, OpenCode, and Copilot — Web, Terminal, Telegram, and Discord interfaces with 107 built-in skills

steals →AI API keys1PasswordTelegram→ sends tohttps://github.com/lidge-jun/cli-jaw.git

reads-telegram-datapublic-github-pushchild-process-spawnreads-system-inforeads-env-varsreads-homedirreads-1passwordcurl-pipe-bash+4

→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

25.3 MB

versions

206

AUTO-PUBLISHED/npm/2026-06-03

pokebedrock-showdown@0.1.17

by smell-of-curry

A modified version of the Pokémon Showdown server, designed for PokeBedrock.

steals →Azure credsChromium logins

public-github-pushreads-chromium-credsreads-azure-credschild-process-spawninstall-path-npm-publisheval-dynamicpastebin-domainreads-env-vars

→ 크리덴셜 읽기 (reads-azure-creds) + 외부 전송지 pastebin-domain 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

135.9 MB

versions

AUTO-PUBLISHED/npm/2026-05-26/MAL-2026-4626

omnius@1.0.200

by robit

AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop

steals →Telegram

reads-telegram-datainstall-path-npm-publisheval-dynamicpy-pip-install-runtime

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

29.9 MB

versions

193

AUTO-PUBLISHED/npm/2026-05-26/MAL-2026-3757

claw-subagent-service@0.0.153

by quukk

虾说智能助手

→ sends tohttp://localhost

reads-env-varsreads-homedirchild-process-spawninstall-path-npm-publish

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

460.7 KB

versions

145

AUTO-PUBLISHED/npm/2026-05-22/MAL-2026-4508

cdk-insights@1.41.2

by GitHub Actions

AWS CDK security and cost analysis CLI. Free static scans via npm — no account needed. Sign up free to add AI-powered insights.

→ sends tohttps://s2zhmjbwlj.execute-api.eu-west-2.amazonaws.com/v1

public-github-pushinstall-path-npm-publish

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

3.1 MB

versions

147

AUTO-PUBLISHED/npm/2026-05-22/MAL-2026-4401

@kruzer/lib-ui@0.0.0-alpha.555

by adminkruzer

This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.

install-path-npm-publish

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

6.5 MB

versions

526

AUTO-PUBLISHED/npm/2023-07-12/MAL-2026-4124

@lint-md/core@2.0.0

by yzl520

Core of lint-md which used to lint your markdown file for Chinese.

install-path-npm-publishchild-process-spawn

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

208.1 KB

versions

AUTO-PUBLISHED/npm/2026-04-27/MAL-2026-4068

@antv/mcp-server-antv@0.1.8

by GitHub Actions

MCP Server for AntV visualization libraries development, which provides documentation context and examples for visualization developers.

→ sends tohttps://github.com/antvis/mcp-server-antv

install-path-npm-publishreads-env-vars

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

118.1 KB

versions

AUTO-PUBLISHED/npm/2024-09-06/MAL-2026-4057

@antv/layout-gpu@1.1.7

by iaaron

graph layout algorithm implemented with GPGPU

→ sends tohttps://github.com/antvis/layout

install-path-npm-publish

→ 의심 전송지 없음, 원격 실행 형태 없음 — 2 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

1.1 MB

versions

AUTO-PUBLISHED/npm/2022-12-22/MAL-2026-4048

@antv/l7-react@2.4.3

by lviser

L7-React 已全面升级为 LarkMap,不在进行维护。 LarkMap 空间数据可视分析组件库

→ sends tohttps://github.com/antvis/L7-react

install-path-npm-publishreads-env-vars

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

203.5 KB

versions

AUTO-PUBLISHED/npm/2022-02-16/MAL-2026-4047

@antv/l7-pass@1.0.0

by yiqianyao

## Getting Started

install-path-npm-publish

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

3.2 KB

versions

AUTO-PUBLISHED/npm/2024-03-29/MAL-2026-4039

@antv/l7-editor@1.1.13

by yanxiong

Geographic data editing tool based on L7

install-path-npm-publishclipboard-accesseval-dynamicfunction-constructor

weekly

/wk

h-score

patterns

size

1.0 MB

versions

AUTO-PUBLISHED/npm/2024-08-22/MAL-2026-4038

@antv/l7-draw@3.1.5

by yanxiong

A drawing package for L7

install-path-npm-publishreads-env-vars

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

4.9 MB

versions

133

AUTO-PUBLISHED/npm/2023-12-13/MAL-2026-3995

@antv/g6-react-node@1.4.8

by iaaron

Using React Component to Define Your G6 Graph Node

install-path-npm-publish

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

472

/wk

llm verdict

benign 0.85

h-score

patterns

size

149.9 KB

versions

AUTO-PUBLISHED/npm/2022-03-02/MAL-2026-3872

@antv/dipper-map@1.0.10

by yanxiong

在线 Demo 地址: https://antv.vision/DipperMap/demo

install-path-npm-publishreads-env-varsreads-shell-historyreads-system-infochild-process-spawn

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

9.9 MB

versions

AUTO-PUBLISHED/npm/2022-01-21/MAL-2026-3871

@antv/dipper-hooks@0.2.1

by lzxue

## Getting Started

install-path-npm-publish

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

73.4 KB

versions

AUTO-PUBLISHED/npm/2021-11-03/MAL-2026-3870

@antv/dipper-component@0.0.4

by lzxue

## Getting Started

install-path-npm-publish

→ 의심 전송지 없음, 원격 실행 형태 없음 — 3 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

130.0 KB

versions