new Function() dynamic code

domain-admin@1.6.78

a domain ssl cert admin

→ Encoded payload + dynamic execution combo (event-stream / flatmap-stream shape) — embedded blob decoded and executed at install time. Fast-tracked.

@phi-code-admin/phi-code2 versions·0.76.8→0.76.13

Coding agent CLI with persistent memory, sub-agents, intelligent routing, and orchestration

→ Credential read (reads-ai-api-keys, reads-gitlab-tokens) paired with dest-via-hostname-var destination — classic exfiltration signature.

@jacob-ebey/almostnode@0.4.0

Node.js in your browser. Just like that.

→ Credential read (reads-ai-api-keys) paired with http-to-public-ip destination — classic exfiltration signature.

@start.dev/almostnode2 versions·0.3.0→0.3.1

Node.js in your browser. Just like that.

→ Credential read (reads-ai-api-keys) paired with http-to-public-ip destination — classic exfiltration signature.

@fleetagent/pi-coding-agent@0.0.8

Coding agent CLI with read, bash, edit, write tools and session management

weavedb-base@0.45.4

A decentralized NoSQL database powered by Arweave.

openclaw-foundry-core@1.0.0

The forge that forges itself — self-writing meta-extension for OpenClaw

→ Credential read (reads-ai-api-keys) paired with webhook-bin destination — classic exfiltration signature.

@qaecy/cue-ui2 versions·0.0.23→0.0.25

QAECY UI Web Components

→ Encoded payload + dynamic execution combo (event-stream / flatmap-stream shape) — embedded blob decoded and executed at install time. Fast-tracked.

@boldreports/javascript-reporting-controls@13.1.35

The Bold Reports by Syncfusion controls for JavaScript contains ReportViewer and ReportDesigner HTML5 and JavaScript reporting controls for enterprise web development

→ Credential read (reads-azure-creds) paired with http-to-public-ip destination — classic exfiltration signature.

vite-json-config@1.0.5

Load node modules according to tsconfig paths, in run-time or via API.

→ No suspicious destination, no remote-exec shape — 1 other host(s).

supership-scan@1.1.0

Predeploy security scanner for the agent economy. 80+ vulnerability patterns. Runs locally, code never leaves your machine.

→ No suspicious destination, no remote-exec shape — 1 other host(s).

prettier-sdk@1.0.2

prettier-sdk is an opinionated code formatter

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

fe-utils-core@1.0.6

Generic frontend utilities for Node.js and browser environments

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@kedem/okdb@1.8.15

A fast, type-oriented database — strong consistency and rich indexing at the core, with sync, vector embeddings, full-text search, and AI tooling built in. Designed for the AI era.

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@antv/layout-wasm@1.4.2

A WASM binding of rust implementation for graph layout algorithms.

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@antv/l7-editor@1.1.13

Geographic data editing tool based on L7

@antv/g2-brush@0.0.2

Select a one-, two-dimensional or irregular region using the mouse.

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@antv/f6-wx@0.0.7

微信小程序f6组件

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).