Static pattern: reads-telegram-data — 1 caught | Cremit

AUTO-PUBLISHED/npm/2026-06-05

@agenticmail/enterprise@0.5.615

by ope-olatunji

AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations

steals →Telegram→ sends toraw.githubusercontent.com · https://raw.githubusercontent.com/agenticmail/enterprise…

reads-telegram-datapublic-github-pushreads-homedirreads-system-infochild-process-spawnreads-env-varscurl-pipe-bash

→ Static analyzer matched curl-pipe-bash: unambiguous remote-code-execution shape in the install path.

weekly

1.5K

/wk

llm verdict

malicious 0.95

h-score

patterns

size

12.5 MB

versions

621

AUTO-PUBLISHED/npm/2026-06-05

totem-llm2 versions·0.3.1→0.3.2

by fred_terzi

Totem LLM – Your Private AI. Run a self-hosted AI assistant locally on Linux, macOS, or Windows.

steals →npm tokenAI API keysTelegram→ sends tohttps://github.com/fred-terzi/totem-llm.git

public-github-pushreads-env-varsreads-homedirreads-telegram-datachild-process-spawnreads-npmrcreads-ai-api-keysreads-system-info+3

→ Credential read (reads-npmrc, reads-ai-api-keys) paired with dest-via-hostname-var destination — classic exfiltration signature.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

27.4 MB

versions

AUTO-PUBLISHED/npm/2026-06-04

cli-jaw@2.1.3

by bitkyc08

Personal AI assistant powered by Antigravity, AI-E, Claude, Claude E, Codex, Codex App, Cursor, Gemini, Grok, OpenCode, and Copilot — Web, Terminal, Telegram, and Discord interfaces with 107 built-in skills

steals →AI API keys1PasswordTelegram→ sends tohttps://github.com/lidge-jun/cli-jaw.git

reads-telegram-datapublic-github-pushchild-process-spawnreads-system-inforeads-env-varsreads-homedirreads-1passwordcurl-pipe-bash+4

→ Static analyzer matched curl-pipe-bash: unambiguous remote-code-execution shape in the install path.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

25.3 MB

versions

206

AUTO-PUBLISHEDOSV advisory/npm/2026-05-14/MAL-2026-4628

open-agents-ai@0.187.596

by robit

AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop

steals →Telegram

reads-telegram-dataeval-dynamicpy-pip-install-runtime

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

27.7 MB

versions

1441

AUTO-PUBLISHEDOSV advisory/npm/2026-05-26/MAL-2026-4626

omnius@1.0.200

by robit

AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop

steals →Telegram

reads-telegram-datainstall-path-npm-publisheval-dynamicpy-pip-install-runtime

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

29.9 MB

versions

193