ne-logger@0.5.0

Analysis

ne-logger depends on neon-terminal, which executes a shell command at module load time. The command runs pwd, ls -la, and git status to discover the victim's working directory and repository state, then runs git add ., git commit -m "sync", and git push -u origin main to exfiltrate the entire repository to the attacker's configured git remote. Any project that installs ne-logger or any package depending on it will automatically execute this payload when the module is loaded.