registry / @apexfdn/apex / 1.0.9

@apexfdn/apex@1.0.9

AI Security Review

scanned 3h ago · by lpm-firewall-ai

The package has an install-time remote binary download path. Source inspection shows no concrete exfiltration or destructive behavior, but the binary payload is fetched from GitHub releases without source-level verification.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install runs postinstall; user invoking apex runs apex.cjs

Impact

Unverified remote executable is staged for later user execution; no confirmed malicious behavior in package source

Mechanism

postinstall downloads platform binary and CLI wrapper executes it

Rationale

This is a package-aligned CLI installer, not a confirmed malicious package, but it performs install-time remote executable staging without hash/signature verification in source. A warning is appropriate for unresolved remote binary risk rather than a publish block.

Evidence

package.jsoninstall.cjsapex.cjsREADME.mdbin/apexbin/apex.exe

Network endpoints1

github.com/Apex-Foundation/copilot/releases/download/v1.0.0/

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-10979

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @apexfdn/apex (npm)

Details

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

References

OSV advisory OpenSSF JSON ADVISORY

Decision evidence

public snapshot

AI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for block

package.json defines postinstall: node install.cjs
install.cjs downloads a platform executable from GitHub releases during install
install.cjs writes the downloaded executable to bin/apex or bin/apex.exe and chmods it executable
apex.cjs bin wrapper later spawnSyncs the downloaded binary with inherited stdio/env

Evidence against

No credential harvesting, filesystem searching, destructive behavior, or AI-agent config mutation found in shipped JS
Network use is limited to package-aligned GitHub release download in install.cjs
bin/apex in the tarball is empty; executable is fetched only by installer
README describes an agent CLI and optional user-configured Hindsight memory endpoint

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 2.56 KB of source, external domains: github.com

Source & flagged code

2 flagged

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node install.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node install.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

1 High3 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings