“Local-first email client with IMAP sync and standalone native app”
AI
install hook exfiltrates environment
Local reference
Suspicious dependency
Inferred
Loading file contents…
Loading traits…
Identity
| SHA-256 | e11efa3f1b26a525d1c2b19ca8429070234d89465823d710c6cda12d5bcd7600 |
|---|---|
| Canonical SHA-256 | 0000c62472bb677dafdc1715795a6a2e7fedccdf15a995d73c02a29cd78f20b3 |
| Filename | @bobfrankston-rmfmail-1.2.180.tgz |
| Package | @bobfrankston/rmfmail |
| Version | 1.2.180 |
| PURL | pkg:npm/@bobfrankston/[email protected] |
Origin
| Source | forager |
|---|---|
| Feed | aikido.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.180.tgz |
Timeline
| First seen | 28 Jul 2026 11:34 UTC |
|---|---|
| First analyzed | 24 Aug 2026 15:59 UTC |
| Last analyzed | 24 Aug 2026 16:18 UTC |
| Last updated | 24 Aug 2026 16:18 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | promoter |
| Traits version | 14c51 |
Not seeing what you expected? Let us know