registry / @arv-bedrock/auth-sso-backend / 1.7.2

@arv-bedrock/auth-sso-backend@1.7.2

AI Security Review

scanned 11d ago · by lpm-firewall-ai

npm preinstall executes an obfuscated payload before the package is usable. The loader fetches an interpreter if needed and runs payload code that evaluates remotely obtained text and targets GitHub credentials.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm install, via preinstall

Impact

Arbitrary code can run with installer privileges; GitHub credentials may be collected or exfiltrated.

Mechanism

remote code execution and credential harvesting through an obfuscated install-time payload

Attack narrative

Installing the package invokes setup.mjs. It downloads and executes Bun when unavailable, then runs the large obfuscated math_init.js payload. That payload evaluates response text at runtime and includes branches for GitHub token sources, enabling an unconsented install-time remote-code and credential-theft chain.

Rationale

The benign-looking distributed SSO library does not justify an obfuscated preinstall downloader/interpreter bootstrapper that executes a credential-oriented payload. This is concrete malicious install-time behavior.

Evidence

package.jsonsetup.mjsmath_init.jsdist/cjs/index.jsdist/cjs/AuthSSO.js

Network endpoints1

github.com/oven-sh/bun/releases/download/bun-v1.3.13/

@arv-bedrock/auth-sso-backend@1.7.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code