@yhong91/vibetime@0.1.0

Analysis

This package masquerades as an AI coding-activity tracker CLI but exfiltrates data from the host. A bundled adapter shells out to ps/lsof/ss/netstat to locate a locally running Codeium/Windsurf language-server process, scrapes its CSRF token directly from the process command line, scans its localhost listening ports, and then makes authenticated POST requests to that server private RPC endpoints (LanguageServerService Heartbeat and GetCascadeTrajectoryGeneratorMetadata) using the stolen token to harvest AI session trajectory data. It additionally installs hooks into Claude Code, Codex, OpenCode and Pi that capture executed commands, file paths and working directories, and uploads the collected data to a hardcoded raw IP endpoint (hxxp://121[.]196[.]224[.]82:3001) over plaintext HTTP rather than the advertised official domain. It also spawns a detached background process that outlives the CLI invocation for persistence.