@a11ign/screenreader-worker@0.13.6
Drives a real NVDA screen reader through real navigation on Windows and returns what it announced. The HTTP contract is the API.
AI Security Review
scanned 6d ago · by lpm-firewall-aiSource inspection confirms that running the package command on Windows triggers broad system changes, including an attempt to disable Defender and changes to update services. This concrete destructive behavior supports blocking publication.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Start the package's a11ign-nvda-worker command on Windows, with trimming not skipped and no completion marker.
Impact
The machine may lose real-time malware protection and Windows updates, have unrelated services disabled, and lose installed provisioned apps.
Mechanism
The server spawns windows-trim.mjs. The helper can request an interactive highest-privilege scheduled task, then changes service startup and running state, removes selected provisioned apps, and attempts to turn off Defender real-time monitoring.
Attack narrative
The package command is wired to the server entrypoint. On Windows, server startup launches the trim helper without a user confirmation step unless a skip flag or marker applies. The helper can escalate through a highest-privilege interactive scheduled task and attempts to disable Defender real-time protection, disable and stop services including Windows Update, and remove selected provisioned apps.
AI rationale
Source inspection confirms that running the package command on Windows triggers broad system changes, including an attempt to disable Defender and changes to update services. This concrete destructive behavior supports blocking publication.
Evidence
package.jsondist/server.mjsdist/windows-trim.mjs.windows-trimmed.windows-trimmed.log.windows-trimmed.json
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json exposes dist/server.mjs as the package command.
- When the server starts on Windows, it automatically launches the trim helper unless an environment flag or marker skips it.
- The helper can create an interactive highest-privilege scheduled task when it is not already elevated, and proceeds with trimming when elevated.
- The helper removes provisioned apps, disables and stops selected services, and attempts to disable Windows Defender real-time protection.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsMinified
CopyleftLicense
Source & flagged code
7 flagged · loading sourcedist/windows-trim.mjsView file
1import { execFileSync } from "node:child_process";
L2: import { readFileSync, writeFileSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/windows-trim.mjsView on unpkg · L1dist/server.mjsView file
1Cross-file remote execution chain: dist/server.mjs spawns dist/src_capture-core_ts.mjs; helper contains network access plus dynamic code execution.
L1: import { createServer } from "node:http";
L2: import { appendFileSync, existsSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, statfsSync, writeFileSync } from "node:fs";
L3: import { execFile, execFileSync, spawn } from "node:child_process";
L4: import { promisify } from "node:util";
...
L8: import { extname, join, resolve as external_node_path_resolve } from "node:path";
L9: import { inflateRawSync } from "node:zlib";
L10: import { randomUUID } from "node:crypto";
...
L22: function powershellValue(script) {
L23: if ("win32" !== process.platform) return "unknown";
L24: try {
...
L47: try {
L48: const { stdout }
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/server.mjsFindings
6 High4 Medium4 Low
HighChild Processdist/windows-trim.mjs
HighCross File Remote Execution Contextdist/server.mjs
HighKnown Malware Source Similaritydist/server.mjs
HighKnown Malware Source Similaritydist/src_capture-core_ts.mjs
HighKnown Malware Source Similaritydist/src_auth-flow_ts.mjs
HighKnown Malware Source Fingerprint Signaturedist/server.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperlauncher/apply-foreground-lock-timeout.ps1
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @a11ign/screenreader-worker@0.13.6.
See all versions of @a11ign/screenreader-worker for other recorded verdicts.
- Avoid installing @a11ign/screenreader-worker@0.13.6. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.