@a11ign/screenreader-worker@0.13.8
Drives a real NVDA screen reader through real navigation on Windows and returns what it announced. The HTTP contract is the API.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe source confirms automatic Windows startup behavior that attempts to disable update and anti-malware protections, creating a concrete, high-impact capability. The package's appliance context leaves intent uncertain, so this warrants a warning rather than a malware block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Run the package's a11ign-nvda-worker command on Windows.
Impact
If the commands succeed, Windows Update and other services may remain disabled, and Defender real-time protection may be turned off. No network endpoint is involved in this behavior.
Mechanism
At server startup, the helper runs once per working-directory marker. It may request elevated scheduled-task execution, disables configured services, and attempts to turn off Defender real-time monitoring.
AI rationale
The source confirms automatic Windows startup behavior that attempts to disable update and anti-malware protections, creating a concrete, high-impact capability. The package's appliance context leaves intent uncertain, so this warrants a warning rather than a malware block.
Evidence
dist/server.mjsdist/windows-trim.mjspackage.json
Decision evidence
public snapshotAI called this Suspicious at 95.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes the server as its command-line entrypoint.
- Starting the server on Windows calls a trim helper by default unless a skip variable is set or its marker already exists.
- When not elevated, the helper attempts to register and start a scheduled task with highest run level.
- The helper disables services including Windows Update, and its service loop sets each listed service to disabled.
- The helper invokes a command to disable Defender real-time monitoring.
- The package describes its purpose as driving NVDA on Windows, which gives some context for appliance tuning.
Evidence against
- The package describes a screen-reader worker for Windows; the trimming behavior may be intended for a dedicated appliance, but it still changes security settings automatically.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcedist/windows-trim.mjsView file
1import { execFileSync } from "node:child_process";
L2: import { readFileSync, writeFileSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/windows-trim.mjsView on unpkg · L1dist/server.mjsView file
1Cross-file remote execution chain: dist/server.mjs spawns dist/src_capture-core_ts.mjs; helper contains network access plus dynamic code execution.
L1: import { createServer } from "node:http";
L2: import { appendFileSync, existsSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, statfsSync, writeFileSync } from "node:fs";
L3: import { execFile, execFileSync, spawn } from "node:child_process";
L4: import { promisify } from "node:util";
...
L8: import { extname, join, resolve as external_node_path_resolve } from "node:path";
L9: import { inflateRawSync } from "node:zlib";
L10: import { randomUUID } from "node:crypto";
...
L22: function powershellValue(script) {
L23: if ("win32" !== process.platform) return "unknown";
L24: try {
...
L47: try {
L48: const { stdout }
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/server.mjsFindings
6 High4 Medium4 Low
HighChild Processdist/windows-trim.mjs
HighCross File Remote Execution Contextdist/server.mjs
HighKnown Malware Source Similaritydist/server.mjs
HighKnown Malware Source Similaritydist/src_capture-core_ts.mjs
HighKnown Malware Source Similaritydist/src_auth-flow_ts.mjs
HighKnown Malware Source Fingerprint Signaturedist/server.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperlauncher/apply-foreground-lock-timeout.ps1
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @a11ign/screenreader-worker@0.13.8.
See all versions of @a11ign/screenreader-worker for other recorded verdicts.
- Review the evidence and your use of @a11ign/screenreader-worker@0.13.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.