@a11ign/screenreader-worker@0.13.12
Drives a real NVDA screen reader through real navigation on Windows and returns what it announced. The HTTP contract is the API.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe worker startup path automatically performs broad Windows system changes, including an attempt to disable Defender real-time monitoring, and can request the interactive user's highest task run level. This is concrete security-degrading behavior, so the package should be blocked.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Starting the worker CLI on Windows, unless the trim-skip environment variable is set.
Impact
The machine may be left without real-time antivirus protection or normal operation of services such as Windows Update.
Mechanism
The server launches a detached helper; when needed, it registers and starts a highest-run-level task for the interactive user. The helper changes service startup settings and attempts to disable Defender real-time monitoring.
Attack narrative
On Windows, starting the worker invokes the trim helper by default. The helper can use a scheduled task at the highest run level and then alter system services and attempt to disable Defender real-time monitoring. This weakens endpoint protection and can suppress updates; the behavior is not limited to the package's own files or process.
AI rationale
The worker startup path automatically performs broad Windows system changes, including an attempt to disable Defender real-time monitoring, and can request the interactive user's highest task run level. This is concrete security-degrading behavior, so the package should be blocked.
Evidence
dist/server.mjsdist/windows-trim.mjs
Decision evidence
public snapshotAI called this Malicious at 94.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package exposes a worker CLI and defines build, lint, typecheck, and test scripts; it has no install lifecycle hook.
- When the CLI server starts, it invokes the Windows trim helper by default; an environment variable can skip it.
- If the current process is not elevated, the helper registers and starts a scheduled task for the interactive user at the highest run level.
- The helper disables startup for its listed Windows services, including Windows Update.
- The helper attempts to disable Defender real-time monitoring when run.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsMinified
CopyleftLicense
Source & flagged code
6 flagged · loading sourcedist/windows-trim.mjsView file
1import { execFileSync } from "node:child_process";
L2: import { readFileSync, writeFileSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/windows-trim.mjsView on unpkg · L1dist/server.mjsView file
1Cross-file remote execution chain: dist/server.mjs spawns dist/src_capture-core_ts.mjs; helper contains network access plus dynamic code execution.
L1: import { createServer } from "node:http";
L2: import { appendFileSync, existsSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, statfsSync, writeFileSync } from "node:fs";
L3: import { execFile, execFileSync, spawn } from "node:child_process";
L4: import { promisify } from "node:util";
...
L8: import { extname, join, resolve as external_node_path_resolve } from "node:path";
L9: import { inflateRawSync } from "node:zlib";
L10: import { randomUUID } from "node:crypto";
...
L22: function powershellValue(script) {
L23: if ("win32" !== process.platform) return "unknown";
L24: try {
...
L47: try {
L48: const { stdout }
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/server.mjsFindings
1 Critical4 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/src_capture-core_ts.mjs
HighChild Processdist/windows-trim.mjs
HighCross File Remote Execution Contextdist/server.mjs
HighKnown Malware Source Similaritydist/server.mjs
HighKnown Malware Source Similaritydist/src_auth-flow_ts.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperlauncher/apply-foreground-lock-timeout.ps1
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowCopyleft License
Affected versions and remediation
This report applies to @a11ign/screenreader-worker@0.13.12.
See all versions of @a11ign/screenreader-worker for other recorded verdicts.
- Avoid installing @a11ign/screenreader-worker@0.13.12. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.