Hostile 92% javascript Download

pointer-feedback 0.2.1

Targets AI agent configs, exfiltrates credentials

“Click-to-comment feedback for your web app: install the widget, then turn pending comments into AI apply prompts.”

New package loads undeclared external dependencyPackage release management scripts (pre/post)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.