Loading npm security reports…

@golproductions/check@4.2.3: Suspicious npm security report | LPM Firewall

registry / @golproductions/check / 4.2.3

@golproductions/check@4.2.3

Anti-hallucination layer for Claude Code: before a command or file write runs, your own machine checks it, and what it proves missing is blocked.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

The shipped CLI and MCP bundle are heavily obfuscated. A version gate can shell out to npx, and both entrypoints accept a remote probe list that is passed into powershell or bash. --install also writes a Claude command hook.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Running the check bin, especially --install or a hooked tool call, or starting the MCP server in dist/mcp.js.

Impact

The publisher can influence local shell execution and receive command context and a machine fingerprint after the user runs the tool. The exact shell script text is hidden by the string decoder, so arbitrary remote code execution is not fully proven.

Mechanism

Obfuscated startup may spawn npx with shell true. Hook and MCP code POST command context to golproductions and, when the response verdict is probe, spawn a shell with up to ten server-chosen strings.

AI rationale

The bundle hides a shell-enabled npx gate and feeds server-returned probe strings into powershell or bash from both the CLI hook path and the MCP server. That is a concrete remote-execution capability, but npm install does not trigger it and the decoded shell script is not visible, so the package should be warned rather than blocked.

Evidence

dist/index.jsdist/mcp.js.claude/settings.json.check/key

Network endpoints2

triage.golproductions.com/preflightgolproductions.com/check

Source & flagged code

6 flagged · loading source

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @golproductions/check@4.2.2 matchedIdentity = npm:QGdvbHByb2R1Y3Rpb25zL2NoZWNr:4.2.2 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

2// Copyright (c) 2026 GOL Productions. All rights reserved. Proprietary and confidential. L3: const a0az=a0F;(function(q,z){const ay=a0F,B=q();while(!![]){try{const F=parseInt(ay(0x1e7,'qFYA'))/0x1+parseInt(ay(0x17f,'x8^I'))/0x2+parseInt(ay(0x1a3,'(Rnj'))/0x3*(parseInt(ay(0...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L2

2// Copyright (c) 2026 GOL Productions. All rights reserved. Proprietary and confidential. L3: const a0az=a0F;(function(q,z){const ay=a0F,B=q();while(!![]){try{const F=parseInt(ay(0x1e7,'qFYA'))/0x1+parseInt(ay(0x17f,'x8^I'))/0x2+parseInt(ay(0x1a3,'(Rnj'))/0x3*(parseInt(ay(0...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L2

2// Copyright (c) 2026 GOL Productions. All rights reserved. Proprietary and confidential. L3: const a0az=a0F;(function(q,z){const ay=a0F,B=q();while(!![]){try{const F=parseInt(ay(0x1e7,'qFYA'))/0x1+parseInt(ay(0x17f,'x8^I'))/0x2+parseInt(ay(0x1a3,'(Rnj'))/0x3*(parseInt(ay(0...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L2

2// Copyright (c) 2026 GOL Productions. All rights reserved. Proprietary and confidential. L3: const a0az=a0F;(function(q,z){const ay=a0F,B=q();while(!![]){try{const F=parseInt(ay(0x1e7,'qFYA'))/0x1+parseInt(ay(0x17f,'x8^I'))/0x2+parseInt(ay(0x1a3,'(Rnj'))/0x3*(parseInt(ay(0...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L2

dist/mcp.jsView file

•matchType = normalized_sha256 matchedPackage = @golproductions/check@4.2.0 matchedPath = dist/mcp.js matchedIdentity = npm:QGdvbHByb2R1Y3Rpb25zL2NoZWNr:4.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/mcp.jsView on unpkg

Source & flagged code

6 flagged

dist/index.jsView file

Lines 1-3javascript

1#!/usr/bin/env node

2// Copyright (c) 2026 GOL Productions. All rights reserved. Proprietary and confidential.

3const a0az=a0F;(function(q,z){const ay=a0F,B=q();while(!![]){try{const F=parseInt(ay(0x1e7,'qFYA'))/0x1+parseInt(ay(0x17f,'x8^I'))/0x2+parseInt(ay(0x1a3,'(Rnj'))/0x3*(parseInt(ay(0x479,'8y&n'))/0x4)+-parseInt(ay(0x254,'609r'))/0x5*(parseInt(ay(0x365,'!y7Z'))/0x6)+-parseInt(ay(0x214,'(Rnj'))/0x7*(parseInt(ay(0x414,'^4y#'))/0x8)+parseInt(ay(0x36e,'x8^I'))/0x9+-parseInt(ay(0x28a,'01!9'))/0xa*(parseInt(ay(0x29f,'(QOh'))/0xb);if(F===z)break;else B['push'](B['shift']());}catch(H){B['push'](B['shift']());}}}(a0B,0x9eee1));import{readFileSync as a0W,writeFileSync as a0X,mkdirSync as a0Y,existsSync as ...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L2

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L2

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L2

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L2

Long lines were clipped for display.

•matchType = previous_version_dangerous_delta matchedPackage = @golproductions/check@4.2.2 matchedIdentity = npm:QGdvbHByb2R1Y3Rpb25zL2NoZWNr:4.2.2 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

dist/mcp.jsView file

•matchType = normalized_sha256 matchedPackage = @golproductions/check@4.2.0 matchedPath = dist/mcp.js matchedIdentity = npm:QGdvbHByb2R1Y3Rpb25zL2NoZWNr:4.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/mcp.jsView on unpkg