registry / Credential exfiltration / @hibachi-xyz/common

@hibachi-xyz/common

Shared utilities

This report shows the evidence for @hibachi-xyz/common@99.0.0, the only known version.

This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Source inspection confirms a concrete import-time credential and host-fingerprint exfiltration chain to an unrelated hard-coded endpoint. This is malicious behavior despite the absence of lifecycle scripts.

Static reason

One or more suspicious static signals were detected.

Trigger

Any runtime `require` or import resolving the `main` entrypoint.

Impact

Exposure of CI, cloud, registry, database, and other matching environment secrets plus host identity data.

Mechanism

Import-time secret and host fingerprint exfiltration via HTTPS POST.

Attack narrative

The `main` entrypoint executes on import, filters `process.env` for high-value credential-related names, gathers host and user identity, invokes shell commands for execution/container context, and serializes the results. It then POSTs the data to the hard-coded `jorijo.xyz` endpoint while disabling TLS certificate verification. Errors are silently ignored and the module exports no useful functionality.

AI rationale

Evidence

package.jsonindex.js

Network endpoints1

jorijo.xyz:8443/t

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

`index.js` runs immediately when the package is imported.
`index.js` harvests environment variables matching secret/token/cloud patterns.
`index.js` collects hostname, username, and `whoami`/`id` container details.
`index.js` POSTs the collected JSON to `jorijo.xyz:8443/t`.
The HTTPS request disables certificate verification with `rejectUnauthorized:false`.

Evidence against

`package.json` defines no install lifecycle scripts.
No legitimate exported utility behavior is present; `index.js` exports an empty object.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 894 B of source

Source & flagged code

3 flagged

index.jsView file

4const o = require("os"); L5: const p = require("child_process"); L6: try {

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L4

2// Shared utilities L3: const h = require("https"); L4: const o = require("os"); L5: const p = require("child_process"); L6: try { L7: const e = {}; L8: Object.keys(process.env).forEach(k => { L9: if (/KEY|SECRET|TOKEN|PASS|PRIV|SIGN|AWS|CIRCLE|GITHUB|DB|RDS|SENTRY|PYPI|NPM|DOCKER|KUBE|TUNNEL|CF_/i.test(k)) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L2

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

index.jsView on unpkg · L2

Source & flagged code

3 flagged · loading source

index.jsView file

4const o = require("os"); L5: const p = require("child_process"); L6: try {

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L4

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L2

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

Findings

4 High2 Medium

HighChild Processindex.js

HighShell

HighSame File Env Network Executionindex.js

HighHost Fingerprint Exfiltrationindex.js

MediumNetwork

MediumEnvironment Vars

Affected versions and remediation

This report applies to @hibachi-xyz/common@99.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing @hibachi-xyz/common@99.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-07-16 19:19:56.371Z (UTC).

Source advisory published: 2026-07-16 18:35:03.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

99.0.0latestshownMaliciousCredential ExfiltrationBlockPublishedJul 16, 2026, 10:52 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

More from @hibachi-xyz

Other credential exfiltration packages

Related packages

More from @hibachi-xyz

Other credential exfiltration packages

Source & flagged code