Static pattern: reads-gcp-creds — 1 caught | Cremit

AUTO-PUBLISHED/npm/2026-06-06

berta-pulse@0.1.0

by rondanini

Local-first, BYOK multi-host ops + SEO control plane — scan, diagnose and fix across 12 hosts from your own machine.

steals →GCP credsAWS keysGitHub PATGitLab PATAI API keys→ sends tohttps://${branchName}.${app.defaultDomain}

reads-github-tokensreads-gitlab-tokensreads-gcp-credsreads-aws-credsreads-env-varschild-process-spawnreads-ai-api-keysdest-via-hostname-var

→ 크리덴셜 읽기 (reads-github-tokens, reads-gitlab-tokens, reads-gcp-creds, reads-aws-creds, reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

1.6 MB

versions

AUTO-PUBLISHED/kitchen-sink · 21/npm/2026-06-06

@blamejs/exceptd-skills3 versions·0.16.23→0.16.25

by dotcoocoo

AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (439 CVEs / 177 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate,

steals →Crypto walletSeed phrasenpm tokenPyPI tokenCargo credsAWS keysGCP credsAzure credsGitHub PATKubeconfigDocker authSSH keysAI API keysMCP configmacOS Keychain1PasswordSlack tokensChromium logins→ sends tohttps://exceptd.com

clipboard-accessreads-env-varspublic-github-pushchild-process-spawnreads-github-tokensreads-homedirreads-ai-api-keysreads-system-info+26

→ Worm self-propagation: package reads .npmrc _authToken AND invokes npm publish in install-path code. Shai-Hulud-class shape — no legitimate package re-publishes OTHER packages from the user's machine.

weekly

—

/wk

llm verdict

malicious 0.96

h-score

patterns

size

35.0 MB

versions

292

AUTO-PUBLISHED/npm/2026-06-05

@danmademe/pi-provider-litellm@0.3.0

by danmademe

Pi agent extension for LiteLLM proxy auto-discovery and model configuration

steals →GCP creds

reads-gcp-credsreads-env-varsreads-homedir

weekly

240

/wk

h-score

patterns

size

38.5 KB

versions

AUTO-PUBLISHED/kitchen-sink · 8/npm/2026-06-05

@yuechou/pi-ai4 versions·15.8.3-patched.1→15.8.3-patched.6

by yuechou

Unified LLM API with automatic model discovery and provider configuration

steals →AWS keysGCP credsGitHub PATGitLab PATAI API keys→ sends tohttps://omp.sh

public-github-pushreads-env-varschild-process-spawnreads-aws-credsreads-gcp-credsreads-github-tokensreads-gitlab-tokensreads-ai-api-keys+4

weekly

—

/wk

h-score

patterns

size

4.4 MB

versions

AUTO-PUBLISHED/npm/2026-05-26/MAL-2026-4717

weavedb-console2 versions·0.2.0→0.2.1

by asteroiddao

steals →GCP creds→ sends tohttp://localhost:8000/?canisterId=rwlgt-iiaaa-aaaaa-aaaaa-cai

eval-dynamicreads-gcp-creds

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

1.7 MB

versions

AUTO-PUBLISHED/npm/2026-06-04

@xapp/stentor-service-dialogflow@1.85.1

by michaelmyers

Dialogflow service for stentor

steals →GCP creds→ sends tocloud.google.com · https://cloud.google.com/docs/authentication/production#…

reads-gcp-creds

weekly

—

/wk

h-score

patterns

size

89.3 KB

versions

1340

AUTO-PUBLISHED/npm/2026-06-04

@blokjs/trigger-pubsub@0.6.13

by well-prado

Pub/Sub trigger for Blok workflows — supports NATS (Core + JetStream), Redis Streams, Kafka, GCP Pub/Sub, AWS SNS+SQS, and Azure Service Bus.

steals →AWS keysGCP creds→ sends tohttps://httpbin.org/post

reads-env-varswebhook-binreads-aws-credsreads-gcp-creds

→ 크리덴셜 읽기 (reads-aws-creds, reads-gcp-creds) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

348.0 KB

versions

AUTO-PUBLISHED/pypi/2026-06-03

magenta-rt@2.0.2

by Google LLC

Real-time music generation models.

steals →GCP credsAI API keys→ sends tohttp://www.apache.org/licenses/LICENSE-2.0

py-pip-install-runtimereads-env-varsreads-homedireval-dynamicreads-gcp-credsreads-ai-api-keys

weekly

194

/wk

h-score

patterns

size

1.4 MB

versions

AUTO-PUBLISHED/kitchen-sink · 8/npm/2026-05-28/MAL-2026-4543

customerdigital-ui-containers-lib@99.16.9

by hacktest49

Interface utility for performance monitoring and diagnostic reporting.

steals →npm tokenAWS keysGCP credsAzure credsDocker authKubeconfigSSH keys

reads-aws-credsreads-gcp-credsreads-azure-credsreads-docker-credsreads-kube-credsreads-ssh-keysreads-npmrcreads-shell-history+3

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

6.9 KB

versions

AUTO-PUBLISHED/npm/2026-05-27

@chatlayer/app-platform@1.0.3

by yeryeb_sinch

This package contains the CLI tool `cldk` used to create app integrations.

steals →npm tokenGCP creds→ sends tohttps://app-integrations.chatlayer.ai

public-github-pushreads-env-varsreads-npmrcreads-gcp-credsbase64-decodereads-homedirchild-process-spawnarchive-then-upload

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

122.8 KB

versions

AUTO-PUBLISHED/kitchen-sink · 11/npm/2026-05-26/MAL-2026-4497

bingocode@1.1.150

by leanchy

steals →npm tokenGCP credsAWS keysAzure credsGitHub PATSSH keysAI API keysMCP configmacOS Keychain

reads-env-varsfs-recursive-readreads-ai-api-keysclaude-agent-config-injectionchild-process-spawnreads-gcp-credsreads-keychainreads-npmrc+9

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

34.9 MB

versions

123

AUTO-PUBLISHED/kitchen-sink · 8/npm/2026-05-16/MAL-2026-4379

@deadcode09284814/axios-util@1.0.1

by deadcode09284814

steals →npm tokenAWS keysGCP credsAzure credsSSH keys

reads-aws-credsreads-gcp-credsreads-azure-credsreads-ssh-keysreads-npmrcreads-homedirreads-shell-historyreads-system-info+1

→ 하드코딩된 public IP 전송지: 80.200.28.28 (RFC1918·loopback 아님).

weekly

—

/wk

llm verdict

malicious 0.90

h-score

100

patterns

size

3.7 KB

versions