Static pattern: reads-gcp-creds

berta-pulse@0.1.0

Local-first, BYOK multi-host ops + SEO control plane — scan, diagnose and fix across 12 hosts from your own machine.

→ Credential read (reads-github-tokens, reads-gitlab-tokens, reads-gcp-creds, reads-aws-creds, reads-ai-api-keys) paired with dest-via-hostname-var destination — classic exfiltration signature.

@blamejs/exceptd-skills3 versions·0.16.23→0.16.25

AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (439 CVEs / 177 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate,

→ Worm self-propagation: package reads .npmrc _authToken AND invokes npm publish in install-path code. Shai-Hulud-class shape — no legitimate package re-publishes OTHER packages from the user's machine.

@danmademe/pi-provider-litellm@0.3.0

Pi agent extension for LiteLLM proxy auto-discovery and model configuration

@yuechou/pi-ai4 versions·15.8.3-patched.1→15.8.3-patched.6

Unified LLM API with automatic model discovery and provider configuration

weavedb-console2 versions·0.2.0→0.2.1

→ No suspicious destination, no remote-exec shape — 1 other host(s).

@xapp/stentor-service-dialogflow@1.85.1

Dialogflow service for stentor

@blokjs/trigger-pubsub@0.6.13

Pub/Sub trigger for Blok workflows — supports NATS (Core + JetStream), Redis Streams, Kafka, GCP Pub/Sub, AWS SNS+SQS, and Azure Service Bus.

→ Credential read (reads-aws-creds, reads-gcp-creds) paired with webhook-bin destination — classic exfiltration signature.

magenta-rt@2.0.2

Real-time music generation models.

customerdigital-ui-containers-lib@99.16.9

Interface utility for performance monitoring and diagnostic reporting.

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@chatlayer/app-platform@1.0.3

This package contains the CLI tool `cldk` used to create app integrations.

→ No suspicious destination, no remote-exec shape — 1 other host(s).

bingocode@1.1.150

<p align="center"> <img src="docs/images/logo-horizontal.jpg" alt="Claude Code Haha" width="480"> </p>

→ No suspicious destination, no remote-exec shape — 1 other host(s).

@deadcode09284814/axios-util@1.0.1

→ Hardcoded public IP destination: 80.200.28.28 (not RFC1918 / loopback).