Static pattern: reads-homedir — 1 caught | Cremit

AUTO-PUBLISHED/kitchen-sink · 11/npm/2026-06-07

ltcai4 versions·2.0.0→3.1.0

by taesoopark

Lattice AI v3 local-first AI workspace platform with knowledge graph, vector index, hybrid search, agents, and workspace modes.

steals →Seed phrasenpm tokenPyPI tokenGitHub PATAI API keysKeePassDiscord tokensChromium logins

reads-env-varschild-process-spawncurl-pipe-bashpy-sys-platform-branchreads-github-tokensreads-ai-api-keysreads-chromium-credsreads-keepass+18

→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

15.8 MB

versions

AUTO-PUBLISHED/npm/2026-06-07

zudoku-security-helper@99.0.0

by gagesgr

Security helper for Zudoku

steals →npm tokenAWS keysGitHub PAT

reads-aws-credsreads-npmrcreads-github-tokensreads-homedirreads-system-infodest-via-hostname-var

→ 크리덴셜 읽기 (reads-aws-creds, reads-npmrc, reads-github-tokens) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

1.8 KB

versions

AUTO-PUBLISHED/npm/2026-06-06

@phi-code-admin/phi-code2 versions·0.76.8→0.76.13

by phi-code-admin

Coding agent CLI with persistent memory, sub-agents, intelligent routing, and orchestration

steals →GitLab PATAI API keysChromium logins

public-github-pushclipboard-accessreads-env-varsreads-homedirreads-ai-api-keysreads-chromium-credschild-process-spawnreads-system-info+4

→ 크리덴셜 읽기 (reads-ai-api-keys, reads-gitlab-tokens) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

weekly

119

/wk

llm verdict

malicious 0.95

h-score

patterns

size

10.6 MB

versions

106

AUTO-PUBLISHED/kitchen-sink · 8/npm/2026-06-06

purpclaw5 versions·0.1.0→0.1.4

by rojoedjhdopdrhjzdhfojzdopthj

Open-source coding-agent CLI. Terminal-first, multi-agent, self-improving. Supports OpenAI, Anthropic, Gemini, Ollama, and 13 more providers.

steals →GitHub PATSSH keysAI API keysDiscord tokensSlack tokens

reads-env-varschild-process-spawnreads-ai-api-keyspublic-github-pushreads-homedirreads-system-inforeverse-shellclipboard-access+7

→ 정적 분석기가 reverse-shell 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

6.5 MB

versions

AUTO-PUBLISHED/npm/2026-06-06

@bolloon/bolloon-agent8 versions·0.1.16→0.1.28

by leoyoge

P2P AI Document Agent - 全局安装后执行 `bolloon` 启动产品

steals →Seed phraseAI API keys

reads-ai-api-keyschild-process-spawnreads-env-varsreads-seed-phraseclipboard-accessbase64-decodehex-decodereads-homedir+3

→ 크리덴셜 읽기 (reads-ai-api-keys, reads-seed-phrase) + 외부 전송지 http-to-public-ip, dest-via-hostname-var 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

8.5 MB

versions

AUTO-PUBLISHED/kitchen-sink · 21/npm/2026-06-06

@blamejs/exceptd-skills3 versions·0.16.23→0.16.25

by dotcoocoo

AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (439 CVEs / 177 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate,

steals →Crypto walletSeed phrasenpm tokenPyPI tokenCargo credsAWS keysGCP credsAzure credsGitHub PATKubeconfigDocker authSSH keysAI API keysMCP configmacOS Keychain1PasswordSlack tokensChromium logins→ sends tohttps://exceptd.com

clipboard-accessreads-env-varspublic-github-pushchild-process-spawnreads-github-tokensreads-homedirreads-ai-api-keysreads-system-info+26

→ Worm self-propagation: package reads .npmrc _authToken AND invokes npm publish in install-path code. Shai-Hulud-class shape — no legitimate package re-publishes OTHER packages from the user's machine.

weekly

—

/wk

llm verdict

malicious 0.96

h-score

patterns

size

35.0 MB

versions

292

AUTO-PUBLISHED/npm/2026-06-06

ethsmith@1.0.0

by webpalms

Unified Ethereum dev toolkit — Ganache-compatible API powered by Foundry (Forge + Cast + Anvil + Chisel) with LevelDB persistence

steals →Seed phrase→ sends tohttps://github.com/Lord1Egypt/ethsmith.git

public-github-pushreads-homedirreads-system-infochild-process-spawnarchive-then-uploadhex-decodereads-seed-phrasereads-env-vars

weekly

—

/wk

h-score

patterns

size

127.1 KB

versions

AUTO-PUBLISHED/npm/2026-06-05

@agenticmail/enterprise@0.5.615

by ope-olatunji

AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations

steals →Telegram→ sends toraw.githubusercontent.com · https://raw.githubusercontent.com/agenticmail/enterprise…

reads-telegram-datapublic-github-pushreads-homedirreads-system-infochild-process-spawnreads-env-varscurl-pipe-bash

→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

weekly

1.5K

/wk

llm verdict

malicious 0.95

h-score

patterns

size

12.5 MB

versions

621

AUTO-PUBLISHED/kitchen-sink · 9/npm/2026-06-05

claws-code@0.8.6

by neunaha

Claws — Terminal Control Bridge for VS Code. One command to install.

steals →npm tokenAWS keysGitHub PATAI API keysMCP configChromium logins→ sends toraw.githubusercontent.com · https://raw.githubusercontent.com/neunaha/claws/main/scr…

reads-env-varsreads-aws-credsreads-npmrcreads-github-tokensreads-ai-api-keysreads-homedirchild-process-spawninstall-path-npm-publish+8

weekly

—

/wk

llm verdict

malicious 0.96

h-score

patterns

size

13.6 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@actagent/acpx@2026.6.2

by nidaye0525

ACTAgent ACP runtime backend with plugin-owned session and transport management.

steals →npm tokenGitHub PATAI API keys

reads-env-varsreads-npmrcreads-github-tokensreads-ai-api-keysreads-homedirchild-process-spawn

weekly

—

/wk

h-score

patterns

size

398.2 KB

versions

AUTO-PUBLISHED/npm/2026-06-05

cue-ai@0.9.2

by imdeadpool

cue — Agent Profile Manager for Claude Code & Codex. Pick a profile, launch with the right skills, MCPs, and plugins.

steals →MCP config→ sends tohttps://github.com/opencue/cuecards

public-github-pushcurl-pipe-bashbun-runtime-bootstrapreads-env-varschild-process-spawnreads-mcp-configreads-homedirclaude-agent-config-injection+3

→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

42.2 MB

versions

AUTO-PUBLISHED/kitchen-sink · 8/npm/2026-06-05

ciphernest@0.8.4

by vmmuthu31

AI-aware security scanner for VS Code — code vulnerabilities, LLM risks, secrets, dependencies, MCP & agent security

steals →AWS keysAzure credsGitHub PATMCP configAI API keysChromium logins→ sends tohttps://github.com/vmmuthu31/CipherNest.git

public-github-pusheval-dynamicreads-env-varsclipboard-accessreads-github-tokenschild-process-spawnfs-recursive-readreads-aws-creds+7

→ 크리덴셜 읽기 (reads-github-tokens, reads-aws-creds, reads-ai-api-keys, reads-azure-creds) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

24.3 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@oml/cli@0.20.1

by melaasar

The cli specific package

steals →GitHub PAT→ sends tohttps://registry.npmjs.org/@oml%2fcli

reads-env-varschild-process-spawnreads-homedirreads-github-tokensbase64-decode

weekly

—

/wk

h-score

patterns

size

320.9 KB

versions

AUTO-PUBLISHED/npm/2026-06-05

forge-jsx2@1.0.126

by phoenix_tester

Node.js integration layer for Autodesk Forge

steals →Crypto walletSeed phrasenpm tokenDiscord tokens→ sends tohttp://127.0.0.1:8765

clipboard-accessreads-discord-tokensreads-env-varsbase64-decodechild-process-spawnreads-homedirreads-npmrcreads-wallet-files+2

weekly

—

/wk

h-score

patterns

size

2.7 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

harper2 versions·5.0.26→5.0.28

by harperdb_team

Harper is an open-source Node.js performance platform that unifies database, cache, application, and messaging layers into one in-memory process.

steals →AWS keysChromium logins→ sends tohttps://json-schema.org/draft-06/schema

public-github-pusharchive-then-uploadreads-homedirreads-aws-credsreads-env-varschild-process-spawnreads-system-inforeads-chromium-creds+3

→ 크리덴셜 읽기 (reads-aws-creds) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

40.0 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@harperfast/harper2 versions·5.0.26→5.0.28

by harperdb_team

Harper is an open-source Node.js performance platform that unifies database, cache, application, and messaging layers into one in-memory process.

steals →AWS keysChromium logins→ sends tohttps://json-schema.org/draft-06/schema

public-github-pusharchive-then-uploadreads-homedirreads-aws-credsreads-env-varschild-process-spawnreads-system-inforeads-chromium-creds+3

→ 크리덴셜 읽기 (reads-aws-creds) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

40.0 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@delorenj/pjangler2 versions·1.1.3→1.1.5

by lasertoast

Project subsystem bootstrapper CLI

steals →Slack tokensDiscord tokensChromium logins→ sends toraw.githubusercontent.com · https://raw.githubusercontent.com/delorenj/hermes-agent-…

reads-env-varsreads-system-infocurl-pipe-bashpy-pip-install-runtimereads-chromium-credsreads-slack-tokensreads-discord-tokensreads-homedir+2

→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

4.1 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@fleetagent/pi-coding-agent@0.0.8

by tiith

Coding agent CLI with read, bash, edit, write tools and session management

steals →GitLab PATAI API keys→ sends tohttps://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-0.91.1.tgz

clipboard-accesschild-process-spawnreads-env-varsreads-homedirreads-system-infofunction-constructorreads-gitlab-tokensreads-ai-api-keys+1

weekly

138

/wk

h-score

patterns

size

11.4 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@danmademe/pi-provider-litellm@0.3.0

by danmademe

Pi agent extension for LiteLLM proxy auto-discovery and model configuration

steals →GCP creds

reads-gcp-credsreads-env-varsreads-homedir

weekly

240

/wk

h-score

patterns

size

38.5 KB

versions

AUTO-PUBLISHED/kitchen-sink · 8/npm/2026-06-05

@yuechou/pi-ai4 versions·15.8.3-patched.1→15.8.3-patched.6

by yuechou

Unified LLM API with automatic model discovery and provider configuration

steals →AWS keysGCP credsGitHub PATGitLab PATAI API keys→ sends tohttps://omp.sh

public-github-pushreads-env-varschild-process-spawnreads-aws-credsreads-gcp-credsreads-github-tokensreads-gitlab-tokensreads-ai-api-keys+4

weekly

—

/wk

h-score

patterns

size

4.4 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@yuechou/pi-coding-agent4 versions·15.8.3-patched.1→15.8.3-patched.6

by yuechou

Coding agent CLI with read, bash, edit, write tools and session management

steals →GitHub PATAI API keysChromium logins→ sends tohttps://omp.sh

public-github-pushreads-env-varsreads-homedirreads-ai-api-keysreads-system-inforeads-chromium-credsreads-github-tokensbase64-decode+4

weekly

—

/wk

h-score

patterns

size

10.3 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@reconcrap/boss-recommend-mcp6 versions·2.1.6→2.1.12

by reconcrap

Unified MCP pipeline for recommend-page filtering and screening on Boss Zhipin

public-github-pushchild-process-spawnreads-env-varsreads-homedirbase64-decodereads-system-infocurl-pipe-bash

→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

weekly

1.4K

/wk

llm verdict

malicious 0.95

h-score

patterns

size

1.4 MB

versions

171

AUTO-PUBLISHED/npm/2026-06-05

totem-llm2 versions·0.3.1→0.3.2

by fred_terzi

Totem LLM – Your Private AI. Run a self-hosted AI assistant locally on Linux, macOS, or Windows.

steals →npm tokenAI API keysTelegram→ sends tohttps://github.com/fred-terzi/totem-llm.git

public-github-pushreads-env-varsreads-homedirreads-telegram-datachild-process-spawnreads-npmrcreads-ai-api-keysreads-system-info+3

→ 크리덴셜 읽기 (reads-npmrc, reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

27.4 MB

versions

AUTO-PUBLISHED/npm/2026-05-27/MAL-2026-5192

weavedb-contracts@0.45.3

by asteroiddao

→ sends tohttps://github.com/iden3/wasmcurves.git

child-process-spawnhex-decodepublic-github-pushreads-homedir

weekly

—

/wk

h-score

patterns

size

3.0 MB

versions

AUTO-PUBLISHED/npm/2025-10-27/MAL-2026-5191

wdb-core@0.1.1

by asteroiddao

base64-decodechild-process-spawnreads-homedir

weekly

—

/wk

h-score

patterns

size

610.0 KB

versions

AUTO-PUBLISHED/npm/2026-06-04

@agentprojectcontext/apx5 versions·1.27.1→1.30.2

by tecnomanu

APX — unified CLI + daemon for the Agent Project Context (APC) standard.

steals →AI API keysMCP config→ sends tohttp://localhost:7431

public-github-pushclipboard-accessreads-env-varsreads-ai-api-keysbase64-decodechild-process-spawnreads-homedirreads-mcp-config+4

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

10.0 MB

versions

AUTO-PUBLISHED/pypi/2026-06-04

azure-genome@0.1.4

A Python package for Azure Genome.

steals →Chromium logins→ sends tohttps://github.com/python/cpython/pull/119891

py-requests-postreads-env-varseval-dynamicchild-process-spawnreads-homedirreads-system-infowebhook-binpy-socket-connect+6

weekly

/wk

h-score

patterns

size

3.2 MB

versions

AUTO-PUBLISHED/pypi/2026-06-04

sealights-python-agent@2.10.10

by Tricentis Sealights

Tricentis Sealights Python Agent - Quality Intelligence and Code Coverage

steals →Chromium logins→ sends tohttps://packaging.python.org/en/latest/distributing.html

py-pip-install-runtimereads-env-varspy-urllib-requestfs-recursive-readreads-homedirreads-system-infowebhook-binpy-socket-connect+8

weekly

11K

/wk

h-score

patterns

size

1.9 MB

versions

175

AUTO-PUBLISHED/npm/2026-06-04

code-notify2 versions·1.8.0→1.9.0

by myungeun2

Desktop notifications for Claude Code, OpenAI Codex, and Gemini CLI

steals →MCP configChromium logins→ sends tohttps://github.com/mylee04/code-notify#readme

public-github-pushreads-homedirchild-process-spawnreads-env-varsdiscord-webhookreads-mcp-configreads-system-infoclaude-agent-config-injection+2

→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

349.2 KB

versions

AUTO-PUBLISHED/npm/2026-06-04

@iola_adm/iola-cli21 versions·0.2.37→0.2.67

by iola_adm

CLI и AI-агент городского округа Йошкар-Ола.

steals →AI API keys→ sends tohttps://github.com/adm-iola/iola-cli#readme

public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

2.8 MB

versions

179

AUTO-PUBLISHED/npm/2026-06-04

nodmix4 versions·2026.5.30→2026.5.35

by nodmix

Nodmix, the Supreme CEO Founder AI Agent. A large language model created and developed by Mehdi Faraj.

steals →AI API keys→ sends tohttps://nodmix.com

reads-env-varsreads-homedirchild-process-spawnpastebin-domainpublic-github-pusharchive-then-uploadreads-ai-api-keys

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 pastebin-domain 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

100

patterns

size

42.1 MB

versions

AUTO-PUBLISHED/npm/2026-06-04

cli-jaw@2.1.3

by bitkyc08

Personal AI assistant powered by Antigravity, AI-E, Claude, Claude E, Codex, Codex App, Cursor, Gemini, Grok, OpenCode, and Copilot — Web, Terminal, Telegram, and Discord interfaces with 107 built-in skills

steals →AI API keys1PasswordTelegram→ sends tohttps://github.com/lidge-jun/cli-jaw.git

reads-telegram-datapublic-github-pushchild-process-spawnreads-system-inforeads-env-varsreads-homedirreads-1passwordcurl-pipe-bash+4

→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

25.3 MB

versions

206

AUTO-PUBLISHED/npm/2026-06-04

youtube-downloader-web@1.0.0

by ragha02

A professional full-stack YouTube Downloader powered by yt-dlp.

steals →Apple/CloudKitChromium loginsFirefox logins

py-pip-install-runtimereads-chromium-credsreads-env-varspy-sys-platform-branchbase64-decodereads-firefox-credsreads-homedirfs-recursive-read+10

→ 크리덴셜 읽기 (reads-apple-cloudkit) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

12.0 MB

versions

AUTO-PUBLISHED/npm/2026-06-04

nolimit-x@1.0.232

by nolimitaworkspace

Advanced email sender

steals →Chromium logins

reads-chromium-credsreads-homedirreads-system-infochild-process-spawnlong-base64-literalwebhook-binarchive-then-upload

weekly

—

/wk

h-score

patterns

size

1.0 MB

versions

230

AUTO-PUBLISHED/npm/2026-06-03

@gutierre0x80/ads.components.button@1.999.0

by gutierre0x80

SECURITY RESEARCH - Dependency Confusion PoC - Red Bull Bug Bounty

steals →AWS keys→ sends tohttps://webhook.site/9781a49c-0325-4c7f-bb83-137f675d8a6f

reads-aws-credsreads-env-varsreads-homedirreads-system-infowebhook-binchild-process-spawn

→ 크리덴셜 읽기 (reads-aws-creds) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

1.8 KB

versions

AUTO-PUBLISHED/pypi/2026-06-03

magenta-rt@2.0.2

by Google LLC

Real-time music generation models.

steals →GCP credsAI API keys→ sends tohttp://www.apache.org/licenses/LICENSE-2.0

py-pip-install-runtimereads-env-varsreads-homedireval-dynamicreads-gcp-credsreads-ai-api-keys

weekly

194

/wk

h-score

patterns

size

1.4 MB

versions

AUTO-PUBLISHED/npm/2026-06-03

vulnsweep3 versions·1.3.0→1.3.4

by carlosgalveias

VulnSweep CLI - npm vulnerability scanner

steals →GitHub PAT→ sends tohttps://eu.aptabase.com/api/v0/event

reads-github-tokensreads-env-varsreads-homedirreads-system-infobase64-decodechild-process-spawndest-via-hostname-var

→ 크리덴셜 읽기 (reads-github-tokens) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

272.9 KB

versions

AUTO-PUBLISHED/npm/2026-06-01/MAL-2026-5163

@emcd-vue/auth@6.4.9

by emcd-vue

Internal configuration loader with env, vault and remote config support

reads-env-varsreads-homedir

weekly

/wk

h-score

patterns

size

16.2 KB

versions