registry / @apexfdn/apex / 1.0.14

@apexfdn/apex@1.0.14

AI Security Review

scanned 3h ago · by lpm-firewall-ai

The postinstall hook fetches an external platform binary and, on Windows, a native addon without integrity verification. The wrapper later launches the package-local binary when the user runs `apex`.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm installation triggers `postinstall`; running `apex` triggers the downloaded binary.

Impact

A compromised or redirected release asset could execute code when the user later invokes the CLI.

Mechanism

Install-time remote binary and native-addon download followed by CLI execution.

Rationale

Source inspection confirms a real install-time remote payload carrier, but does not show credential theft, destructive behavior, AI-agent control-surface mutation, or a confirmed malicious payload. Treat as a warning due to unverified executable delivery.

Evidence

package.jsoninstall.cjsapex.cjsbin/apexbin/apex.exe~/.apex/natives/16.3.6/pi_natives.win32-x64-baseline.node

Network endpoints1

github.com/Apex-Foundation/copilot/releases/download/v1.0.0/

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-10979

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @apexfdn/apex (npm)

Details

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

References

OSV advisory OpenSSF JSON ADVISORY

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for block

`package.json` runs `node install.cjs` as `postinstall`.
`install.cjs` downloads platform executables during install.
Downloads have no checksum or signature verification.
Redirects are followed without restricting the destination host.
Windows install drops a native `.node` addon under `~/.apex`.

Evidence against

`install.cjs` only targets `github.com/Apex-Foundation/copilot` release assets.
No credential harvesting, environment exfiltration, or agent-config writes found.
`apex.cjs` executes the downloaded binary only after explicit CLI invocation.
No destructive commands, eval, shell invocation, or persistence beyond package-owned binary files found.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 3.12 KB of source, external domains: github.com

Source & flagged code

3 flagged

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node install.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

install.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @apexfdn/apex@1.0.9 matchedIdentity = npm:QGFwZXhmZG4vYXBleA:1.0.9 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

install.cjsView on unpkg

Source & flagged code

3 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node install.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

install.cjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

install.cjsView on unpkg

Findings

2 High3 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighPrevious Version Dangerous Deltainstall.cjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings