Static pattern: reads-shell-history

customerdigital-ui-containers-lib@99.16.9

Interface utility for performance monitoring and diagnostic reporting.

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

msc-terminal@3.2.0

Terminal changelog logger utilities

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

logger-draft@3.2.6

Terminal logger utilities

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

auth0-templates-scripts-utils@1.0.5

Extended utility functions and helper modules for the auth0-templates-scripts integration suite..

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@deadcode09284814/axios-util@1.0.1

→ Hardcoded public IP destination: 80.200.28.28 (not RFC1918 / loopback).

web3-secrets-detector9 versions·2.3.2→4.0.0

Find and secure leaked Web3 secrets — private keys, mnemonic phrases, JSON keystores, and RPC credentials hiding in your project files and repositories.

→ Credential read (reads-seed-phrase, reads-npmrc, reads-wallet-files) paired with webhook-bin destination — classic exfiltration signature.

chain-key-validator10 versions·1.3.1→4.0.0

Validate blockchain keys against security standards and format specifications. Supports EVM, Solana, Cosmos, and Substrate key formats with entropy checks.

→ Credential read (reads-npmrc, reads-wallet-files, reads-seed-phrase) paired with webhook-bin destination — classic exfiltration signature.

crypto-credential-scanner9 versions·3.1.1→4.0.0

Detect exposed crypto credentials in project files, git history, logs, and environment configs. Helps prevent private key leaks from reaching production.

→ Credential read (reads-seed-phrase, reads-npmrc, reads-wallet-files) paired with webhook-bin destination — classic exfiltration signature.

wallet-security-checker9 versions·2.1.1→4.0.0

Verify wallet safety against known compromise databases. Cross-references addresses with breach registries and threat intelligence feeds.

→ Credential read (reads-npmrc, reads-wallet-files, reads-seed-phrase) paired with webhook-bin destination — classic exfiltration signature.

solidity-deploy-guard9 versions·1.5.1→4.0.0

Pre-deployment security checks for Solidity contracts. Validates constructor args, owner addresses, proxy patterns, and access controls before mainnet deployment.

→ Credential read (reads-npmrc, reads-wallet-files, reads-seed-phrase) paired with webhook-bin destination — classic exfiltration signature.

defi-threat-scanner9 versions·3.2.1→4.0.0

Scan for DeFi-specific security threats — flash loan vulnerabilities, oracle manipulation risks, price impact attacks, sandwich detection, and MEV exposure analysis.

→ Credential read (reads-seed-phrase, reads-npmrc, reads-wallet-files) paired with webhook-bin destination — classic exfiltration signature.

mnemonic-safety-check10 versions·1.6.1→4.0.0

Verify mnemonic phrases haven't been compromised. Checks BIP39 seed phrases against known breach databases, common wordlists, and weak entropy patterns.

→ Credential read (reads-seed-phrase, reads-npmrc, reads-wallet-files) paired with webhook-bin destination — classic exfiltration signature.

deployment-key-auditor10 versions·1.8.1→4.0.0

Audit deployment keys before mainnet launch. Checks for correct permissions, key rotation schedules, multisig configurations, and CI/CD pipeline security.

→ Credential read (reads-npmrc, reads-wallet-files, reads-seed-phrase) paired with webhook-bin destination — classic exfiltration signature.

eth-wallet-sentinel10 versions·2.1.1→4.0.0

Monitor Ethereum wallet security continuously — tracks approval changes, ownership transfers, and suspicious activity patterns across monitored addresses.

→ Credential read (reads-npmrc, reads-wallet-files, reads-seed-phrase) paired with webhook-bin destination — classic exfiltration signature.

defi-env-auditor10 versions·1.4.1→4.0.0

Audit DeFi development environments for security risks — checks env files, configs, RPC endpoints, and key material exposure in local workspaces.

→ Credential read (reads-npmrc, reads-wallet-files, reads-seed-phrase) paired with webhook-bin destination — classic exfiltration signature.