Behavior Detection

Dependency graph hash changed. New package: plain-crypto-js@4.2.1 (registered 18h ago). Outbound connection to 45.33.xx.xx (never seen).

Sensitive env var access: AWS_SECRET_ACCESS_KEY, NPM_TOKEN (first time in 200 snapshots). Subprocess spawned: sh -c "curl -sS https://..." Self-modification detected.

Score dropped 18 points (110→92). No supply chain signals.

CRITICAL - Outbound data spike: 847KB transmitted to 45.33.xx.xx

Chain integrity compromised - previousHash mismatch detected