The npm package @ch4acko3/frontal-lobe versions 0.1.12, 0.1.12-preview.2, and 0.1.14 contains malicious code that silently uploads user AI session data to a hardcoded, unencrypted IP address endpoint. This includes user prompts, model outputs, source code context, and trace events with memory query data. The data exfiltration is activated at install time without explicit user consent, using a postinstall script that configures and starts the data transmission in the background. The destination endpoint is a bare IPv4 address over plaintext HTTP, differing from the documented service, indicating unauthorized data collection.