Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@adguard/dnr-rulesets@4.1.20260817230120: Clean npm security | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 12 low-signal pattern(s) reviewed.

View on npm All versions

registry / @adguard/dnr-rulesets / 4.1.20260817230120

@adguard/dnr-rulesets@4.1.20260817230120

Utility to create AdGuard DNR rulesets for mv3 extensions

AI Security Review

scanned 1d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The user-invoked CLI downloads AdGuard filter metadata and text assets, then writes them to caller-selected paths.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

User runs `dnr-rulesets load` or `watch --latest-filters`

Impact

Expected project asset creation; no unconsented install-time action or exfiltration found.

Mechanism

Downloads and converts DNR filter rulesets

Rationale

Direct inspection shows a ruleset-conversion CLI with explicitly invoked, package-aligned filter downloads. Scanner similarity and WASM signals do not establish malicious behavior.

Evidence

package.jsondist/cli.cjsdist/lib/index.js

Network endpoints1

filters.adtidy.org/extension/%browser%/filters

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with high false-positive risk.

Evidence for block

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Evidence against

package.json defines no preinstall, install, or postinstall lifecycle hook.
CLI network access is an explicit `load`/`watch --latest-filters` feature for AdGuard filter assets.
Downloaded data is saved only to the caller-provided output directory; no credential harvesting or exfiltration was found.
No child-process execution or import-time network/download path was found.

Behavioral surface

Source

ChildProcessCryptoFilesystemNetwork

Supply chain

HighEntropyStringsTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 4 file(s), 3.16 MB of source, external domains: af.gog.com, dai.google.com, file-upload.org, filters.adtidy.org, foo.com, future-sale-system.de, googleads.g.doubleclick.net, pubads.g.doubleclick.net, securepubads.g.doubleclick.net, www.facebook.com, www.gog.com, www.iab.net, www.ndtv.com, www.wp.pl

Oversized source lightweight scan

dist/cli.cjs3.81 MB file, sampled 256 KB

FilesystemNetworkCryptoUrlStringsfilters.adtidy.org

Source & flagged code

4 flagged · loading source

dist/lib/index.jsView file

10import { fileURLToPath } from 'node:url'; L11: import axios from 'axios'; L12: import fastGlob from 'fast-glob'; ... L999: var reservedWords = { L1000: 3: "abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super syn... L1001: 5: "class enum extends super const export import", ... L1048: if (code <= 0xffff) { L1049: return code >= 0xaa && nonASCIIidentifierStart.test(String.fromCharCode(code)); L1050: } ... L8289: start: S.token, L8290: body: block_(), L8291: end: prev()

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/index.jsView on unpkg · L10

dist/re2.wasmView file

•path = dist/re2.wasm kind = wasm_module sizeBytes = 892736 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/re2.wasmView on unpkg

dist/cli.cjsView file

•matchType = normalized_sha256 matchedPackage = @adguard/dnr-rulesets@4.1.20260722190044 matchedPath = dist/cli.cjs matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:4.1.20260722190044 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.cjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = a7ffe81b59a4dc0d signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @adguard/dnr-rulesets@4.1.20260722190044 matchedPath = dist/cli.cjs matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:4.1.20260722190044 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/cli.cjsView on unpkg

Findings

2 High3 Medium7 Low

HighKnown Malware Source Similaritydist/cli.cjs

HighKnown Malware Source Fingerprint Signaturedist/cli.cjs

MediumNetwork

MediumShips Wasm Moduledist/re2.wasm

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/lib/index.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowCopyleft License

98%Pass

Verdict confidence

IntentBenign

False-positive riskHigh

Review stagesource_first_review

Firewall policyNo policy match

Package metadata

npm

AuthorAdguard Software Ltd.

Maintainersameshkov, maximtop, blakhard

Version4.1.20260819060046

PublishedAug 17, 2026

LicenseGPL-3.0-only

Dependencies10

Integrityverified

Package size43.7 MB

Files126

Runtime surface

package.json

Entrypointsmain → dist/lib/index.jstypes → dist/types/lib/index.d.tsexports mapbin → dnr-rulesets

RuntimeNo engine / OS / CPU constraints

Artifact210 MB · 126 files1 signature(s)

Install lifecycleNo install hooks · other: build, build:assets, build:docs, build:lib +8

Behavioral surface

ChildProcessCryptoFilesystemNetworkHighEntropyStringsTelemetryUrlStringsCopyleftLicense

LPM CLI

Source & flagged code

4 flagged

dist/lib/index.jsView file

10import { fileURLToPath } from 'node:url'; L11: import axios from 'axios'; L12: import fastGlob from 'fast-glob'; ... L999: var reservedWords = { L1000: 3: "abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super syn... L1001: 5: "class enum extends super const export import", ... L1048: if (code <= 0xffff) { L1049: return code >= 0xaa && nonASCIIidentifierStart.test(String.fromCharCode(code)); L1050: } ... L8289: start: S.token, L8290: body: block_(), L8291: end: prev()

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/index.jsView on unpkg · L10

dist/re2.wasmView file

•path = dist/re2.wasm kind = wasm_module sizeBytes = 892736 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/re2.wasmView on unpkg

dist/cli.cjsView file

•matchType = normalized_sha256 matchedPackage = @adguard/dnr-rulesets@4.1.20260722190044 matchedPath = dist/cli.cjs matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:4.1.20260722190044 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.cjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = a7ffe81b59a4dc0d signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @adguard/dnr-rulesets@4.1.20260722190044 matchedPath = dist/cli.cjs matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:4.1.20260722190044 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/cli.cjsView on unpkg