registry / @bangdao-ai/acw-tools / 1.13.67

@bangdao-ai/acw-tools@1.13.67

MCP (Model Context Protocol) tools for ACW - download rules and initialize Common Admin projects

AI Security Review

scanned 16d ago · by lpm-firewall-ai

An automatic, heavily obfuscated install hook downloads a remote archive and installs its contents as a native dependency. No integrity check is visible before the downloaded bytes are decompressed and written.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation triggers the postinstall script when built-in SQLite is unavailable and better-sqlite3 cannot load.

Impact

A party able to alter the remote archive or its delivery can cause unreviewed native code to be installed and loaded on the installing machine.

Mechanism

The hook constructs an OSS URL, fetches its response, gunzips and writes archive contents into the better-sqlite3 module, then uses child-process functionality during its recovery flow.

Attack narrative

Installing the package automatically runs an obfuscated postinstall hook. Under its fallback condition, the hook retrieves a native better-sqlite3 archive from a remote OSS endpoint, extracts it into node_modules, and proceeds with module recovery using child-process functionality. The archive has no visible checksum or signature validation, making this an automatic remote-code delivery path.

AI rationale

The package creates an automatic install-time path from an unverified remote archive to installed native code. Obfuscation and the absence of integrity validation make this concrete remote code execution risk unsuitable for publication.

Evidence

package.jsonpostinstall.jsnode_modules/better-sqlite3

Network endpoints1

bd-acw.oss-cn-beijing.aliyuncs.com/prebuilds/better-sqlite3

@bangdao-ai/acw-tools@1.13.67

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code