Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@adguard/dnr-rulesets@4.1.20260816230054: Clean npm security | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 12 low-signal pattern(s) reviewed.

View on npm All versions

registry / @adguard/dnr-rulesets / 4.1.20260816230054

@adguard/dnr-rulesets@4.1.20260816230054

Utility to create AdGuard DNR rulesets for mv3 extensions

AI Security Review

scanned 2d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package provides an explicitly invoked CLI/library for building, copying, and optionally downloading browser DNR filter assets.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

User directly runs the dnr-rulesets CLI or calls its asset-loading API with latestFilters enabled.

Impact

Expected developer asset generation only; no install-time execution, credential collection, or unconsented persistence was found.

Mechanism

Downloads AdGuard filter metadata/text to a caller-selected destination or copies bundled rulesets.

Rationale

Static source inspection shows an opt-in ruleset CLI, not malware. The scanner similarity signal is unsupported by concrete malicious behavior in the inspected package.

Evidence

package.jsondist/cli.cjsdist/lib/index.jsdist/utils/index.js

Network endpoints1

filters.adtidy.org/extension/%browser%

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Evidence for block

CLI can download filter assets from a fixed AdGuard endpoint when explicitly invoked with latest-filter options.

Evidence against

package.json has no preinstall, install, postinstall, or prepare hook.
The network request is a documented filter-metadata download and writes only to the caller-supplied destination.
CLI execution is guarded to direct invocation; importing does not run its main routine.
No credential/environment harvesting, child-process execution, or shell/network exfiltration primitive was found.

Behavioral surface

Source

ChildProcessCryptoFilesystemNetwork

Supply chain

HighEntropyStringsTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 4 file(s), 3.15 MB of source, external domains: af.gog.com, dai.google.com, file-upload.org, filters.adtidy.org, foo.com, future-sale-system.de, googleads.g.doubleclick.net, pubads.g.doubleclick.net, securepubads.g.doubleclick.net, www.facebook.com, www.gog.com, www.iab.net, www.ndtv.com, www.wp.pl

Oversized source lightweight scan

dist/cli.cjs3.81 MB file, sampled 256 KB

FilesystemNetworkCryptoUrlStringsfilters.adtidy.org

Source & flagged code

4 flagged · loading source

dist/lib/index.jsView file

10import { fileURLToPath } from 'node:url'; L11: import axios from 'axios'; L12: import fastGlob from 'fast-glob'; ... L999: var reservedWords = { L1000: 3: "abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super syn... L1001: 5: "class enum extends super const export import", ... L1048: if (code <= 0xffff) { L1049: return code >= 0xaa && nonASCIIidentifierStart.test(String.fromCharCode(code)); L1050: } ... L8289: start: S.token, L8290: body: block_(), L8291: end: prev()

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/index.jsView on unpkg · L10

dist/re2.wasmView file

•path = dist/re2.wasm kind = wasm_module sizeBytes = 892736 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/re2.wasmView on unpkg

dist/cli.cjsView file

•matchType = normalized_sha256 matchedPackage = @adguard/dnr-rulesets@4.1.20260722190044 matchedPath = dist/cli.cjs matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:4.1.20260722190044 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.cjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = a7ffe81b59a4dc0d signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @adguard/dnr-rulesets@4.1.20260722190044 matchedPath = dist/cli.cjs matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:4.1.20260722190044 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/cli.cjsView on unpkg

Findings

2 High3 Medium7 Low

HighKnown Malware Source Similaritydist/cli.cjs

HighKnown Malware Source Fingerprint Signaturedist/cli.cjs

MediumNetwork

MediumShips Wasm Moduledist/re2.wasm

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/lib/index.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowCopyleft License

99%Pass

Verdict confidence

IntentBenign

False-positive riskLow

Review stagesource_first_review

Firewall policyNo policy match

Package metadata

npm

AuthorAdguard Software Ltd.

Maintainersameshkov, maximtop, blakhard

Version4.1.20260819060046

PublishedAug 16, 2026

LicenseGPL-3.0-only

Dependencies10

Integrityverified

Package size42.1 MB

Files126

Runtime surface

package.json

Entrypointsmain → dist/lib/index.jstypes → dist/types/lib/index.d.tsexports mapbin → dnr-rulesets

RuntimeNo engine / OS / CPU constraints

Artifact203 MB · 126 files1 signature(s)

Install lifecycleNo install hooks · other: build, build:assets, build:docs, build:lib +8

Behavioral surface

ChildProcessCryptoFilesystemNetworkHighEntropyStringsTelemetryUrlStringsCopyleftLicense

LPM CLI

Source & flagged code

4 flagged

dist/lib/index.jsView file

10import { fileURLToPath } from 'node:url'; L11: import axios from 'axios'; L12: import fastGlob from 'fast-glob'; ... L999: var reservedWords = { L1000: 3: "abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super syn... L1001: 5: "class enum extends super const export import", ... L1048: if (code <= 0xffff) { L1049: return code >= 0xaa && nonASCIIidentifierStart.test(String.fromCharCode(code)); L1050: } ... L8289: start: S.token, L8290: body: block_(), L8291: end: prev()

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/index.jsView on unpkg · L10

dist/re2.wasmView file

•path = dist/re2.wasm kind = wasm_module sizeBytes = 892736 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/re2.wasmView on unpkg

dist/cli.cjsView file

•matchType = normalized_sha256 matchedPackage = @adguard/dnr-rulesets@4.1.20260722190044 matchedPath = dist/cli.cjs matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:4.1.20260722190044 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.cjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = a7ffe81b59a4dc0d signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @adguard/dnr-rulesets@4.1.20260722190044 matchedPath = dist/cli.cjs matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:4.1.20260722190044 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/cli.cjsView on unpkg