ms-client-portal
Advanced tools
Defensive placeholder. Benign beacon only (single HTTP GET to researcher server), no functional code. Held to prevent dependency-confusion abuse of an internal project name exposed in a production web bundle. Will be transferred to the owning organization
Benign research placeholder published to protect an internal project name disclosed by a production web bundle of a health-sector client portal. Contains no functional code. Its install scripts send a single HTTP GET (user, hostname, working directory) to the researcher server and nothing else.
This name will be transferred to the owning organization or deprecated immediately on request through the bug bounty report.
FAQs
Defensive placeholder. Benign beacon only (single HTTP GET to researcher server), no functional code. Held to prevent dependency-confusion abuse of an internal project name exposed in a production web bundle. Will be transferred to the owning organization
The npm package ms-client-portal receives a total of 0 weekly downloads. As such, ms-client-portal popularity was classified as not popular.
We found that ms-client-portal demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Threat Research
/Security News
Cursor removed a malicious Claude Code 2.1.313 extension from its marketplace. Socket examines registry records and the initial claims about its distribution.
Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
