“Local-first email client with IMAP sync and standalone native app”
AI
Exfiltrates IMAP credentials to external URL
Local reference
Suspicious dependency
Inferred
Loading file contents…
Loading traits…
Identity
| SHA-256 | 05826891ef91495f18302be2b3c83cbd321062f90b1b6f9749a2ff173efaa120 |
|---|---|
| Canonical SHA-256 | 00262c43e2b04c05268d3dde898335e81c1dc70212e17ade5bd9efb6115f489d |
| Filename | @bobfrankston-rmfmail-1.2.258.tgz |
| Package | @bobfrankston/rmfmail |
| Version | 1.2.258 |
| PURL | pkg:npm/@bobfrankston/[email protected] |
Origin
| Source | forager |
|---|---|
| Feed | aikido.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.258.tgz |
Timeline
| First seen | 13 Aug 2026 23:01 UTC |
|---|---|
| First analyzed | 14 Aug 2026 21:50 UTC |
| Last analyzed | 14 Aug 2026 21:50 UTC |
| Last updated | 14 Aug 2026 21:50 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | promoter |
| Traits version | fb1c6 |
Not seeing what you expected? Let us know