incidents.cremit.io

A reference feed of real-world Non-Human Identity (NHI) credential leak incidents. Maintained by Cremit.

Browse

// status

monitor active

// build

2026-10-25

// origin

cremit · seoul, kr

// license

//http-to-public-ip-libonly

// Data staging

Static pattern: http-to-public-ip-libonly

pattern: http-to-public-ip-libonly

Packages whose static analysis matched this pattern. See the per-package detail pages for the offending code excerpt.

2 packages flagged with this pattern. Newest first.

Static pattern: http-to-public-ip-libonly — 1 caught | Cremit · NHI Credential Stealer Index

AUTO-PUBLISHED/pypi/2026-06-04

A Python package for Azure Genome.

steals →Chromium logins→ sends tohttps://github.com/python/cpython/pull/119891

py-requests-postreads-env-varseval-dynamicchild-process-spawnreads-homedirreads-system-infowebhook-binpy-socket-connect+6

weekly

/wk

h-score

patterns

size

3.2 MB

versions

AUTO-PUBLISHED🟡High blast/pypi/2026-06-04

by Tricentis Sealights

Tricentis Sealights Python Agent - Quality Intelligence and Code Coverage

steals →Chromium logins→ sends tohttps://packaging.python.org/en/latest/distributing.html

py-pip-install-runtimereads-env-varspy-urllib-requestfs-recursive-readreads-homedirreads-system-infowebhook-binpy-socket-connect+8

weekly

11K

/wk

h-score

patterns

size

1.9 MB

versions

175