Static pattern: screen-capture — 1 caught | Cremit

AUTO-PUBLISHED/kitchen-sink · 11/npm/2026-06-07

ltcai12 versions·0.1.29→3.1.0

by taesoopark

Lattice AI v3 local-first AI workspace platform with knowledge graph, vector index, hybrid search, agents, and workspace modes.

steals →Seed phrasenpm tokenPyPI tokenGitHub PATAI API keysKeePassDiscord tokensChromium logins

reads-env-varschild-process-spawncurl-pipe-bashpy-sys-platform-branchreads-github-tokensreads-ai-api-keysreads-chromium-credsreads-keepass+18

→ Static analyzer matched curl-pipe-bash: unambiguous remote-code-execution shape in the install path.

weekly

—

/wk

llm verdict

malicious 0.95

h-score

patterns

size

15.8 MB

versions

AUTO-PUBLISHED/pypi/2026-06-07

domain-admin@1.6.78

by Peng Shiyu

a domain ssl cert admin

steals →Chromium logins→ sends tohttps://pypi.org/simple

child-process-spawnpy-pip-install-runtimereads-env-varspy-requests-postpy-socket-connectlong-base64-literallong-hex-literalclipboard-access+6

→ Encoded payload + dynamic execution combo (event-stream / flatmap-stream shape) — embedded blob decoded and executed at install time. Fast-tracked.

weekly

310

/wk

llm verdict

malicious 0.92

h-score

patterns

size

1.8 MB

versions

211

AUTO-PUBLISHED/kitchen-sink · 9/npm/2026-06-05

claws-code@0.8.6

by neunaha

Claws — Terminal Control Bridge for VS Code. One command to install.

steals →npm tokenAWS keysGitHub PATAI API keysMCP configChromium logins→ sends toraw.githubusercontent.com · https://raw.githubusercontent.com/neunaha/claws/main/scr…

reads-env-varsreads-aws-credsreads-npmrcreads-github-tokensreads-ai-api-keysreads-homedirchild-process-spawninstall-path-npm-publish+8

→ Worm self-propagation: package reads .npmrc _authToken AND invokes npm publish in install-path code. Shai-Hulud-class shape — no legitimate package re-publishes OTHER packages from the user's machine.

weekly

—

/wk

llm verdict

malicious 0.96

h-score

patterns

size

13.6 MB

versions

AUTO-PUBLISHED/npm/2026-06-04

@qaecy/cue-ui2 versions·0.0.23→0.0.25

by madsholten

QAECY UI Web Components

→ sends tohttps://docs.mapbox.com/mapbox-gl-js/guides/install/#transpiling

reads-env-varsbase64-decodechild-process-spawnpastebin-domainfunction-constructorlong-base64-literalclipboard-accesslong-hex-literal+2

→ Encoded payload + dynamic execution combo (event-stream / flatmap-stream shape) — embedded blob decoded and executed at install time. Fast-tracked.

weekly

—

/wk

llm verdict

malicious 0.92

h-score

patterns

size

14.7 MB

versions

AUTO-PUBLISHEDOSV advisory/npm/2026-05-26/MAL-2026-4823

msc-terminal@3.2.0

by nhpkevte1576

Terminal changelog logger utilities

steals →Seed phraseChromium loginsFirefox logins

reads-chromium-credsreads-firefox-credsreads-seed-phrasereads-env-varsreads-shell-historypublic-github-pushbase64-decodechild-process-spawn+3

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

weekly

—

/wk

llm verdict

benign 0.85

h-score

patterns

size

831.4 KB

versions

AUTO-PUBLISHEDOSV advisory/npm/2026-05-26/MAL-2026-4346

logger-draft@3.2.6

by mufu202633

Terminal logger utilities

steals →Seed phraseChromium loginsFirefox logins

reads-chromium-credsreads-firefox-credsreads-seed-phrasereads-env-varsreads-shell-historypublic-github-pushbase64-decodechild-process-spawn+3

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

weekly

794

/wk

llm verdict

benign 0.85

h-score

patterns

size

831.1 KB

versions