Dynamic eval() execution

ltcai12 versions·0.1.29→3.1.0

Lattice AI v3 local-first AI workspace platform with knowledge graph, vector index, hybrid search, agents, and workspace modes.

→ Static analyzer matched curl-pipe-bash: unambiguous remote-code-execution shape in the install path.

domain-admin@1.6.78

a domain ssl cert admin

→ Encoded payload + dynamic execution combo (event-stream / flatmap-stream shape) — embedded blob decoded and executed at install time. Fast-tracked.

@blamejs/exceptd-skills3 versions·0.16.23→0.16.25

AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (439 CVEs / 177 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate,

→ Worm self-propagation: package reads .npmrc _authToken AND invokes npm publish in install-path code. Shai-Hulud-class shape — no legitimate package re-publishes OTHER packages from the user's machine.

@jacob-ebey/almostnode@0.4.0

Node.js in your browser. Just like that.

→ Credential read (reads-ai-api-keys) paired with http-to-public-ip destination — classic exfiltration signature.

@start.dev/almostnode2 versions·0.3.0→0.3.1

Node.js in your browser. Just like that.

→ Credential read (reads-ai-api-keys) paired with http-to-public-ip destination — classic exfiltration signature.

ciphernest2 versions·0.4.0→0.8.4

AI-aware security scanner for VS Code — code vulnerabilities, LLM risks, secrets, dependencies, MCP & agent security

→ Credential read (reads-github-tokens, reads-aws-creds, reads-ai-api-keys, reads-azure-creds) paired with webhook-bin destination — classic exfiltration signature.

@yuechou/pi-coding-agent4 versions·15.8.3-patched.1→15.8.3-patched.6

Coding agent CLI with read, bash, edit, write tools and session management

@ethlete/cli@2.0.1

@ethlete/theming@2.7.1

@ethlete/dsp@0.3.1

weavedb-console2 versions·0.2.0→0.2.1

→ No suspicious destination, no remote-exec shape — 1 other host(s).

cwao-units@0.8.4

`cwao-units` runs [AO compatible units](https://ao.arweave.dev/#/spec) for CosmWasm.

atomic-notes@0.5.2

aonote@0.11.0

ai32 versions·0.3.4→0.3.5

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

azure-genome@0.1.4

A Python package for Azure Genome.

openclaw-foundry-core@1.0.0

The forge that forges itself — self-writing meta-extension for OpenClaw

→ Credential read (reads-ai-api-keys) paired with webhook-bin destination — classic exfiltration signature.

sealights-python-agent@2.10.10

Tricentis Sealights Python Agent - Quality Intelligence and Code Coverage

@iola_adm/iola-cli21 versions·0.2.37→0.2.67

CLI и AI-агент городского округа Йошкар-Ола.

→ Credential read (reads-ai-api-keys) paired with dest-via-hostname-var destination — classic exfiltration signature.

magenta-rt@2.0.2

Real-time music generation models.

pokebedrock-showdown@0.1.17

A modified version of the Pokémon Showdown server, designed for PokeBedrock.

→ Credential read (reads-azure-creds) paired with pastebin-domain destination — classic exfiltration signature.

@antv/l7-core2 versions·2.25.10→2.28.11

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@t-in-one/save_application_hid_to_storage@99.0.7

tbank utilities

→ No suspicious destination, no remote-exec shape — 1 other host(s).

txdpy@2026.5

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

mathepy@7.9.0

Module for Quick Calculations

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

eplang@8.0.0

EPL - English Programming Language: write code in plain English. Build apps, web servers, and more.

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 2 other host(s).

supership-scan@1.1.0

Predeploy security scanner for the agent economy. 80+ vulnerability patterns. Runs locally, code never leaves your machine.

→ No suspicious destination, no remote-exec shape — 1 other host(s).

security-env-loader@3.11.0

Loads environment variables from .env file

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

react-ui-polyfills@1.2.7

A lightweight React utility package that provides browser-safe polyfills, UI compatibility helpers, and runtime shims for modern React applications.

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

react-cleaner@1.0.5

Jsonify the structure and output chalk string

→ No suspicious destination, no remote-exec shape — 1 other host(s).

open-agents-ai@0.187.596

AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

omnius@1.0.200

AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

happy-dlscord.js@14.16.3

A powerful library for interacting with the Discord API

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@antv/l7-editor@1.1.13

Geographic data editing tool based on L7