Loading npm security reports…

@ansstory/hias@1.0.31: Malicious npm security report (Block) | LPM Firewall

registry / @ansstory/hias / 1.0.31

@ansstory/hias@1.0.31

CLI scaffolding tool with project templates and component generators for Vue/React/uni-app

AI Security Review

scanned 25d ago · by lpm-firewall-ai

A user running the GitLens activator causes the package to alter installed third-party editor extension files. The changes bypass GitLens product and permission checks.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

Run the hias gitlens activator command.

Impact

GitLens installations can be changed to grant Enterprise-like access or disable permission gates.

Mechanism

Third-party extension binary modification for entitlement bypass.

Attack narrative

The package registers a GitLens command whose activator finds installed GitLens extension files and rewrites them. Its replacement rules turn Community and Pro checks into Enterprise checks, and another routine replaces a graph permission condition with a constant false value. These are deliberate modifications of a third-party extension to bypass controls, not ordinary scaffolding behavior.

AI rationale

Although its automatic hook only initializes package-owned configuration, the package contains a direct, functional third-party entitlement and gate-bypass capability. That concrete tampering behavior warrants blocking publication.

Evidence

dist/index.js~/.vscode/extensions/eamodio.gitlens-*/dist/gitlens.js~/.vscode/extensions/eamodio.gitlens-*/dist/browser/gitlens.js~/.vscode/extensions/eamodio.gitlens-*/dist/webviews/graph.js

Decision evidence

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./dist/index.js global-config

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./dist/index.js global-config

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

78\v\f\r\x1B !"#\xA5%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}\u203E\x7F\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\u... L79: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\xA5]^_\`abcdefghijklmnopqrstuvwxyz{|}\u203E\x7F\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uF... L80: `;ue.DEFAULT_CONTENT_TYPE="application/octet-stream";ue.prototype.append=function(e,t,r){r=r||{},typeof r=="string"&&(r={filename:r});var n=v6.prototype.append.bind(this);if((typeo... ... L90: `;let d=rCe.default(a);a.write(`${c}\r L91: `);let{statusCode:m,buffered:h}=yield d;if(m===200){if(t.once("socket",nCe),r.secureEndpoint){dl("Upgrading socket connection to TLS");let b=r.servername||r.host;return gL.default.

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/index.jsView on unpkg · L78

13(Did you mean one of ${n.join(", ")}?)`:n.length===1?` L14: (Did you mean ${n[0]}?)`:""}KO.suggestSimilar=xJ});var QO=f(Ib=>{var vJ=require("node:events").EventEmitter,Fb=require("node:child_process"),Fn=require("node:path"),Dp=require("nod... L15: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=t._name),(r.noHelp||r.hidden)&&(t._hidden=!0),this._registerComma...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L13

16Expecting one of '${n.join("', '")}'`);return this._lifeCycleHooks[t]?this._lifeCycleHooks[t].push(r):this._lifeCycleHooks[t]=[r],this}exitOverride(t){return t?this._exitCallback=t... L17: - already used by option '${r.flags}'`)}this._initOptionGroup(t),this.options.push(t)}_registerCommand(t){let r=i=>[i.name()].concat(i.aliases()),n=r(t).find(i=>this._findCommand(... L18: - either make a new Command for each call to parse, or stop storing options as properties`);this._name=this._savedState._name,this._scriptPath=null,this.rawArgs=[],this._optionValu... ... L26: Expecting one of '${n.join("', '")}'`);let i=`${t}Help`;return this.on(i,a=>{let s;typeof r=="function"?s=r({error:a.error,command:a.command}):s=r,s&&a.write(`${s} L27: `)}),this}_outputHelpIfRequested(t){let r=this._getHelp

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L16

13(Did you mean one of ${n.join(", ")}?)`:n.length===1?` L14: (Did you mean ${n[0]}?)`:""}KO.suggestSimilar=xJ});var QO=f(Ib=>{var vJ=require("node:events").EventEmitter,Fb=require("node:child_process"),Fn=require("node:path"),Dp=require("nod... L15: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=t._name),(r.noHelp||r.hidden)&&(t._hidden=!0),this._registerComma... ... L26: Expecting one of '${n.join("', '")}'`);let i=`${t}Help`;return this.on(i,a=>{let s;typeof r=="function"?s=r({error:a.error,command:a.command}):s=r,s&&a.write(`${s} L27: `)}),this}_outputHelpIfRequested(t){let r=this._getHelpOption();r&&t.find(i=>r.is(i))&&(this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)"))}};function ZO(e){r...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L13

13Trigger-reachable command-output exfiltration chain: scripts.postinstall -> dist/index.js L13: (Did you mean one of ${n.join(", ")}?)`:n.length===1?` L14: (Did you mean ${n[0]}?)`:""}KO.suggestSimilar=xJ});var QO=f(Ib=>{var vJ=require("node:events").EventEmitter,Fb=require("node:child_process"),Fn=require("node:path"),Dp=require("nod... L15: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=t._name),(r.noHelp||r.hidden)&&(t._hidden=!0),this._registerComma... ... L26: Expecting one of '${n.join("', '")}'`);let i=`${t}Help`;return this.on(i,a=>{let s;typeof r=="function"?s=r({error:a.error,command:a.command}):s=r,s&&a.write(`${s} L27: `)}),this}_outputHelpIfRequested(t){let r=this._getHelpOption();r&&t.find(i=>r.is(i))&&(this.o

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = @ansstory/hias@1.0.29 matchedPath = dist/index.js matchedIdentity = npm:QGFuc3N0b3J5L2hpYXM:1.0.29 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 2067caf851657905 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @ansstory/hias@1.0.29 matchedPath = dist/index.js matchedIdentity = npm:QGFuc3N0b3J5L2hpYXM:1.0.29 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/index.jsView on unpkg

1#! /usr/bin/env node L2: var f=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var zO=f((ZUe,$O)=>{"use strict";var K=e=>typeof e=="string",Yc=()=>{let e,t,r=new Promise((n,i)=>{e=n,t=i});return r.... L3: `)}displayWidth(t){return GO(t).length}styleTitle(t){return t}styleUsage(t){return t.split(" ").map(r=>r==="[options]"?this.styleOptionText(r):r==="[command]"?this.styleSubcommandT...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

129`;Br.escapeXML=function(e){return e==null?"":String(e).replace(KNe,XNe)};function $X(){return Function.prototype.toString.call(this)+`; L130: `+YNe}try{typeof Object.defineProperty=="function"?Object.defineProperty(Br.escapeXML,"toString",{value:$X}):Br.escapeXML.toString=$X}catch{console.warn("Unable to set escapeXML.to... L131: `),s=Math.max(n-3,0),o=Math.min(a.length,n+3),c=i(r),u=a.slice(s,o).map(function(l,p){var d=p+s+1;return(d==n?" >> ":" ")+d+"| "+l}).join(`

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L129

Source & flagged code

11 flagged

package.jsonView file

Lines 18-58json

18 "dist/"

19 ],

20 "keywords": [

21 "hias",

22 "cli",

23 "scaffolding",

24 "vue",

25 "react",

26 "uni-app",

27 "nuxt",

28 "component-generator",

29 "project-template"

30 ],

31 "scripts": {

32 "build": "node build.config.js",

33 "build:obfuscated": "set OBFUSCATE=true && node build.config.js",

34 "gen:gitlens-dict": "node scripts/gen-gitlens-dict.js",

35 "prep:gitlens-zh": "node scripts/prep-gitlens-zh.js",

36 "test": "node --test",

37 "prepublishOnly": "npm run build:obfuscated",

38 "postinstall": "node ./dist/index.js global-config",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L38

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L38

39 "uninstall": "node ./dist/index.js clear-config"

40 },

41 "dependencies": {

42 "@babel/parser": "^7.29.3",

43 "axios": "^1.17.0",

44 "chalk": "^4.1.2",

45 "commander": "^14.0.0",

46 "deepmerge": "^4.3.1",

47 "download-git-repo": "^3.0.2",

48 "ejs": "^3.1.10",

49 "i18next": "^26.3.0",

50 "inquirer": "^8.2.6",

51 "joi": "^18.2.3",

52 "ora": "^5.4.1"

53 },

54 "devDependencies": {

55 "esbuild": "^0.28.0",

56 "javascript-obfuscator": "^5.4.3",

57 "vitepress": "^1.6.4"

58 }

dist/index.jsView file

78\v\f\r\x1B !"#\xA5%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}\u203E\x7F\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\u... L79: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\xA5]^_\`abcdefghijklmnopqrstuvwxyz{|}\u203E\x7F\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uF... L80: `;ue.DEFAULT_CONTENT_TYPE="application/octet-stream";ue.prototype.append=function(e,t,r){r=r||{},typeof r=="string"&&(r={filename:r});var n=v6.prototype.append.bind(this);if((typeo... ... L90: `;let d=rCe.default(a);a.write(`${c}\r L91: `);let{statusCode:m,buffered:h}=yield d;if(m===200){if(t.once("socket",nCe),r.secureEndpoint){dl("Upgrading socket connection to TLS");let b=r.servername||r.host;return gL.default.

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/index.jsView on unpkg · L78

13(Did you mean one of ${n.join(", ")}?)`:n.length===1?` L14: (Did you mean ${n[0]}?)`:""}KO.suggestSimilar=xJ});var QO=f(Ib=>{var vJ=require("node:events").EventEmitter,Fb=require("node:child_process"),Fn=require("node:path"),Dp=require("nod... L15: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=t._name),(r.noHelp||r.hidden)&&(t._hidden=!0),this._registerComma...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L13

16Expecting one of '${n.join("', '")}'`);return this._lifeCycleHooks[t]?this._lifeCycleHooks[t].push(r):this._lifeCycleHooks[t]=[r],this}exitOverride(t){return t?this._exitCallback=t... L17: - already used by option '${r.flags}'`)}this._initOptionGroup(t),this.options.push(t)}_registerCommand(t){let r=i=>[i.name()].concat(i.aliases()),n=r(t).find(i=>this._findCommand(... L18: - either make a new Command for each call to parse, or stop storing options as properties`);this._name=this._savedState._name,this._scriptPath=null,this.rawArgs=[],this._optionValu... ... L26: Expecting one of '${n.join("', '")}'`);let i=`${t}Help`;return this.on(i,a=>{let s;typeof r=="function"?s=r({error:a.error,command:a.command}):s=r,s&&a.write(`${s} L27: `)}),this}_outputHelpIfRequested(t){let r=this._getHelp