registry / @h3nr1-d14z/nat-gate / 2.3.0

@h3nr1-d14z/nat-gate@2.3.0

CLI tool for managing iptables port forwarding through Tailscale tunnels

AI Security Review

scanned 23d ago · by lpm-firewall-ai

Installation fetches an unpinned latest-release binary, accepts redirects, writes it into the package, and executes it. The downloaded executable is not part of the reviewed package or integrity-verified.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation runs the postinstall hook on Linux.

Impact

A release or redirect target can cause arbitrary code execution with the installing user's permissions.

Mechanism

postinstall download-and-execute of a remotely selected binary

Attack narrative

The postinstall hook queries the latest release, uses its asset URL, follows redirects, stores the result as bin/nat-gate, makes it executable, and invokes it. Because neither the release version nor artifact digest is pinned, installation executes code outside the reviewed npm artifact.

AI rationale

This is an automatic, unverified remote payload execution chain during npm installation. Platform filtering does not constrain the code supplied by the latest release or redirect target.

Evidence

package.jsonscripts/install.jsbin/nat-gate

Network endpoints2

api.github.comgithub.com/h3nr1-d14z/nat-gate/releases/latest

@h3nr1-d14z/nat-gate@2.3.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code