@a11ign/screenreader-worker@0.13.7
Drives a real NVDA screen reader through real navigation on Windows and returns what it announced. The HTTP contract is the API.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe worker's normal startup triggers unconsented Windows system changes, including disabling Defender real-time monitoring and Windows Update services. These concrete effects support a malicious destructive-action verdict.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Run the a11ign-nvda-worker executable on Windows without A11Y_SKIP_TRIM or an existing trim marker.
Impact
Host protection and update services can be disabled, and selected Windows apps can be removed without a per-action user confirmation.
Mechanism
The server starts the trim helper in a detached process. The helper attempts an elevated task when needed, removes selected provisioned apps, disables listed services, and turns off Defender real-time monitoring.
Attack narrative
The published executable points to dist/server.mjs. When the server starts on Windows, it launches the trim helper unless an environment opt-out is set or a marker already exists. The helper disables Defender real-time monitoring, disables services that include Windows Update, and removes selected provisioned apps. It can also attempt an elevated task handoff. This automatic host security and system modification supports blocking publication.
AI rationale
The worker's normal startup triggers unconsented Windows system changes, including disabling Defender real-time monitoring and Windows Update services. These concrete effects support a malicious destructive-action verdict.
Evidence
package.jsondist/server.mjsdist/windows-trim.mjs
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json exposes dist/server.mjs as the a11ign-nvda-worker executable.
- Starting the server invokes the Windows trim routine; it runs unless A11Y_SKIP_TRIM is set or a marker exists.
- The trim routine targets Windows Update services, including wuauserv, and removes selected provisioned apps.
- The routine disables services and removes provisioned apps; it also attempts to hand off to an elevated task.
- The helper disables Windows Defender real-time monitoring and runs that action when invoked as the trim script.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsMinified
CopyleftLicense
Source & flagged code
5 flagged · loading sourcedist/windows-trim.mjsView file
1import { execFileSync } from "node:child_process";
L2: import { readFileSync, writeFileSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/windows-trim.mjsView on unpkg · L1dist/server.mjsView file
1Cross-file remote execution chain: dist/server.mjs spawns dist/src_capture-core_ts.mjs; helper contains network access plus dynamic code execution.
L1: import { createServer } from "node:http";
L2: import { appendFileSync, existsSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, statfsSync, writeFileSync } from "node:fs";
L3: import { execFile, execFileSync, spawn } from "node:child_process";
L4: import { promisify } from "node:util";
...
L8: import { extname, join, resolve as external_node_path_resolve } from "node:path";
L9: import { inflateRawSync } from "node:zlib";
L10: import { randomUUID } from "node:crypto";
...
L22: function powershellValue(script) {
L23: if ("win32" !== process.platform) return "unknown";
L24: try {
...
L47: try {
L48: const { stdout }
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/server.mjsFindings
4 High4 Medium4 Low
HighChild Processdist/windows-trim.mjs
HighCross File Remote Execution Contextdist/server.mjs
HighKnown Malware Source Similaritydist/src_capture-core_ts.mjs
HighAi Review Evidencepackage.json
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperlauncher/apply-foreground-lock-timeout.ps1
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowCopyleft License
Affected versions and remediation
This report applies to @a11ign/screenreader-worker@0.13.7.
See all versions of @a11ign/screenreader-worker for other recorded verdicts.
- Avoid installing @a11ign/screenreader-worker@0.13.7. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.