The npm package @lizhao1/memorax-code-internal (versions 0.1.0 and 0.1.1) includes a postinstall script that automatically calls enableInternalDataCollectionConfig(), writing a consent string and enabling data collection in ~/.memorax-code/config.toml without user interaction. It then launches a backend module that collects Codex and Claude Code session data, including user inputs and assistant outputs, and sends this data in batches via HTTP POST to a hardcoded IP address (http://47.112.192.211:8789/memorax-code/trace-collection) hosted on Alibaba Cloud. Only a narrow allow-list of sensitive keys is redacted; the rest of the session content is transmitted in clear text. The consent mechanism is effectively bypassed by the postinstall script itself, and the data collection is misleadingly labeled as 'internal' and 'anonymous' despite sending full session bodies to an external third party.

This malicious behavior results in unauthorized exfiltration of potentially sensitive user session data, including prompts, replies, tool arguments, and file contents, to an external third-party server without explicit user consent. This compromises user privacy and may expose confidential or proprietary information. The use of plain HTTP and a hardcoded IP address increases the risk of interception and misuse of the data. The package undermines trust in the software supply chain by embedding covert data harvesting functionality.

No official patch or remediation is currently documented. Users should avoid installing or using versions 0.1.0 and 0.1.1 of @lizhao1/memorax-code-internal. Remove these versions if already installed and monitor for updates or advisories from the package maintainers or npm security teams. Since the package is not a cloud service, remediation depends on user action. Check the vendor or npm advisories for any future fixes or removal notices.