Static pattern: reads-discord-tokens — 1 caught | Cremit

AUTO-PUBLISHED/kitchen-sink · 11/npm/2026-06-07

ltcai12 versions·0.1.29→3.1.0

by taesoopark

Lattice AI v3 local-first AI workspace platform with knowledge graph, vector index, hybrid search, agents, and workspace modes.

steals →Seed phrasenpm tokenPyPI tokenGitHub PATAI API keysKeePassDiscord tokensChromium logins

reads-env-varschild-process-spawncurl-pipe-bashpy-sys-platform-branchreads-github-tokensreads-ai-api-keysreads-chromium-credsreads-keepass+18

→ Static analyzer matched curl-pipe-bash: unambiguous remote-code-execution shape in the install path.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

15.8 MB

versions

AUTO-PUBLISHED/kitchen-sink · 8/npm/2026-06-06

purpclaw5 versions·0.1.0→0.1.4

by rojoedjhdopdrhjzdhfojzdopthj

Open-source coding-agent CLI. Terminal-first, multi-agent, self-improving. Supports OpenAI, Anthropic, Gemini, Ollama, and 13 more providers.

steals →GitHub PATSSH keysAI API keysDiscord tokensSlack tokens

reads-env-varschild-process-spawnreads-ai-api-keyspublic-github-pushreads-homedirreads-system-inforeverse-shellclipboard-access+7

→ Static analyzer matched reverse-shell: unambiguous remote-code-execution shape in the install path.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

6.5 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

forge-jsx2@1.0.126

by phoenix_tester

Node.js integration layer for Autodesk Forge

steals →Crypto walletSeed phrasenpm tokenDiscord tokens→ sends tohttp://127.0.0.1:8765

clipboard-accessreads-discord-tokensreads-env-varsbase64-decodechild-process-spawnreads-homedirreads-npmrcreads-wallet-files+2

weekly

—

/wk

h-score

patterns

size

2.7 MB

versions

AUTO-PUBLISHED/npm/2026-06-05

@delorenj/pjangler2 versions·1.1.3→1.1.5

by lasertoast

Project subsystem bootstrapper CLI

steals →Slack tokensDiscord tokensChromium logins→ sends toraw.githubusercontent.com · https://raw.githubusercontent.com/delorenj/hermes-agent-…

reads-env-varsreads-system-infocurl-pipe-bashpy-pip-install-runtimereads-chromium-credsreads-slack-tokensreads-discord-tokensreads-homedir+2

→ Static analyzer matched curl-pipe-bash: unambiguous remote-code-execution shape in the install path.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

4.1 MB

versions

AUTO-PUBLISHED/npm/2026-05-25/MAL-2026-4575

happy-dlscord.js@14.16.3

by gk90

A powerful library for interacting with the Discord API

steals →Discord tokens→ sends tohttps://json.schemastore.org/package.json

public-github-pusheval-dynamicchild-process-spawnreads-discord-tokensreads-env-vars

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

1.8 MB

versions