registry / @hrmony/component-library / 28.99.0

@hrmony/component-library@28.99.0

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The import entrypoint harvests cloud credentials, environment variables, and Kubernetes secrets, then sends them to an external endpoint.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing the package entrypoint.

Impact

Cloud credentials and deployment secrets can be disclosed to an unrelated external host.

Mechanism

Top-level asynchronous calls query AWS metadata, enumerate environment variables, recursively read /var/run/secrets/, and use HTTP POST requests to export results.

Attack narrative

On import, the entrypoint contacts an external host, gathers AWS metadata including IAM credentials and user data, gathers all environment variables, and reads Kubernetes secret files. It posts the collected data to the external host while suppressing errors. This is active credential and secret exfiltration.

AI rationale

The source implements active, automatic collection of sensitive cloud and local secrets followed by export to an unrelated endpoint. The behavior is malicious data exfiltration.

Evidence

index.js/var/run/secrets/

Network endpoints2

hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_component-library169.254.169.254

OSV advisory

OpenSSF/OSV

index.js (declared as the package main) runs top-level async code on require/import that performs three exfiltration actions against a hardcoded attacker endpoint https://hrnmn.dd.h4x.tv/. First, it POSTs a fixed beacon identifying the package to /save_instance_info_from_pkge_hrmony_component-library. Second, it queries the AWS EC2 Instance Metadata Service at 169.254.169.254 using IMDSv2, enumerates IAM roles, and reads iam/security-credentials/{role} to collect temporary AWS access keys along with the identity document and user-data, then POSTs the collected object to the same host. Third, it iterates every entry of process.env and recursively reads all files under /var/run/secrets/ (Kubernetes service-account tokens and mounted secrets) and POSTs them to the same host. The package ships no component-library code; the exfiltration payload is its only behavior. The scope name @hrmony (missing the 'a' from @harmony) and the abnormally high 28.99.0 version are consistent with typosquat and dependency-confusion targeting.

@hrmony/component-library@28.99.0

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code