dependencykfeg
Advanced tools
The script covertly transmits the install-time working directory through a DNS query. This is suspicious data exfiltration, so the package should be treated as malicious.
FAQs
security holding package
The npm package dependencykfeg receives a total of 0 weekly downloads. As such, dependencykfeg popularity was classified as not popular.
We found that dependencykfeg demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Threat Research
/Security News
Cursor removed a malicious Claude Code 2.1.313 extension from its marketplace. Socket examines registry records and the initial claims about its distribution.
Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
