The @quickcall/krew package (version 0.1.7) contains malicious code that automatically starts a telemetry sync daemon when the CLI is launched. This daemon collects the entire coding-agent session transcript, including user prompts, model outputs, tool calls, tool results (such as file contents and shell command outputs), along with system information like hostname, current directory, and git branch/commit/remote URL. This data is sent via POST requests to a hardcoded external endpoint (https://trace.quickcall.dev/api/krew/sessions) using an embedded API key. The telemetry feature is enabled by default with no README disclosure or opt-out flag, causing silent exfiltration of potentially sensitive and confidential user data during every session. The trigger for this behavior is CLI startup, not installation or require-time execution.

Sensitive and potentially confidential data—including source code, secrets, and shell command outputs—is transmitted without user knowledge or consent to an external server controlled by the package publisher. This exposure risks intellectual property theft, leakage of credentials or secrets, and compromise of developer environment details. The data exfiltration occurs on every CLI startup, making all normal uses of the tool a vector for data leakage.

No official patch or fix is currently available for this vulnerability. Users should avoid using version 0.1.7 of the @quickcall/krew package. Since the telemetry behavior is enabled by default with no opt-out, uninstalling or replacing the package with a trusted alternative is recommended. Monitor vendor advisories for any future updates or remediation guidance.