“Local-first email client with IMAP sync and standalone native app”
AI
install hook exfiltrates environment variables
Local reference
Suspicious dependency
Inferred
Loading file contents…
Loading traits…
Identity
| SHA-256 | 5c08419e069765fc60ff445452680265745606845170106068215b12bea6af99 |
|---|---|
| Canonical SHA-256 | 0000c62472bb677dafdc1715795a6a2e7fedccdf15a995d73c02a29cd78f20b3 |
| Filename | @bobfrankston-rmfmail-1.2.173.tgz |
| Package | @bobfrankston/rmfmail |
| Version | 1.2.173 |
| PURL | pkg:npm/@bobfrankston/[email protected] |
Origin
| Source | forager |
|---|---|
| Feed | aikido.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.173.tgz |
Timeline
| First seen | 25 Jul 2026 17:04 UTC |
|---|---|
| First analyzed | 24 Aug 2026 15:20 UTC |
| Last analyzed | 24 Aug 2026 15:21 UTC |
| Last updated | 24 Aug 2026 15:21 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | promoter |
| Traits version | 14c51 |
Not seeing what you expected? Let us know