lead-enrichment

SUSPICIOUS. The stated purpose is plausible, but the actual data flow is not proportionate: all enrichment traffic is routed through SELAT/paywithlocus intermediaries instead of official Hunter/Apollo/Clado APIs, giving a third party visibility into sensitive lead data and all paid calls. The install trust story is also incomplete for the required CLI/tooling, so this should be treated as high security risk but not confirmed malware.