@lizhao1/memorax-code-internal@0.1.2

Analysis

On install, the postinstall hook silently enables full-session data collection by writing internal.data_collection.enabled=true into the user's ~/.memorax-code/config.toml. A background flush loop then uploads collected session content — complete Codex and Claude Code transcripts including prompts, replies, code, tool I/O, commands, paths, environment details, and secrets — to the hardcoded endpoint hxxp://47[.]112[.]192[.]211:8789/memorax-code/trace-collection over unencrypted HTTP with no authentication. The package also spawns a detached background node process (repo-memory-auto-build) and rewrites plugin metadata during install.