registry / @finxsecdemo/utils / 1.0.2

@finxsecdemo/utils@1.0.2

PoC package for internal dependency-confusion security demo. Harmless - see postinstall.js.

AI Security Review

scanned 16d ago · by lpm-firewall-ai

Installation executes an outbound callback to an external OAST host. It also collects local host/user context for console output, though that context is not sent in the request.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install

Impact

Confirms arbitrary install-time code execution to an external observer.

Mechanism

postinstall HTTPS/DNS execution callback

Attack narrative

The package installs a postinstall hook that immediately makes HTTPS and DNS requests to an OAST endpoint. Its code and output identify this as a dependency-confusion proof of arbitrary code execution from a public registry, creating an unconsented external install-time callback.

Rationale

The source establishes intentional install-time execution and an external callback, not merely a static hint. Although no payload download or file modification was found, this is concrete dependency-confusion attack behavior.

Evidence

package.jsonpostinstall.jsindex.js

Network endpoints1

llhvrrffsffmousfvteqie2heq3c7rl55.oast.fun

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-11170

Source

The postinstall.js lifecycle script unconditionally issues an HTTPS GET and a DNS resolution against a hardcoded interact.sh/OAST subdomain (llhvrrffsffmousfvteqie2heq3c7rl55.oast.fun) on every install, reading os.hostname(), os.userInfo(), and process.env in the surrounding code. The beacon fires on `npm install` and reports the installer's source IP and DNS resolver IP to whoever owns the OAST token, giving them an enumeration list of hosts on which the package landed. The package's own `main` returns a formatCurrency string containing '[DEPENDENCY-CONFUSION-POC: this ran from the PUBLIC npm registry, not @finxsecdemo private packages]', which corrupts any consumer that displays formatted currency. Console framing as a 'dependency confusion PoC' is author-controlled labeling; the network callback and output corruption occur regardless. ## Source: ossf-package-analysis (f6ca8fa85d211056af32639b18f95f13c362b2764d85c812e6741d6747abf94d) The OpenSSF Package Analysis project identified '@finxsecdemo/utils' @ 1.0.2 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

@finxsecdemo/utils@1.0.2

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code