registry / @hrmony/interfaces / 0.99.0

@hrmony/interfaces@0.99.0

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The main module harvests cloud and local secrets and sends them to an external endpoint. No user action or configuration gate protects this behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing the package main entry point activates the collection routines.

Impact

AWS credentials, instance data, environment secrets, and Kubernetes secrets can be exfiltrated.

Mechanism

The module requests AWS metadata, copies process environment variables, recursively reads Kubernetes secrets, and sends JSON payloads using fetch.

Attack narrative

When the package entry point is imported, it contacts an external host and then attempts to collect AWS instance metadata, including IAM credentials and user data. It also copies the full process environment and recursively reads Kubernetes secret files. The module posts these collected values to the same external host and suppresses collection errors, making the behavior covert and automatic.

AI rationale

This is active, automatic credential and secret exfiltration from the package entry point. The behavior is concrete malware rather than a guarded administrative capability.

Evidence

index.jspackage.json

Network endpoints2

hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_interfaces169.254.169.254

OSV advisory

index.js executes top-level async code on any require/import of the package. The code (1) obtains an AWS IMDSv2 token and fetches EC2 instance identity, IAM role temporary security credentials from /latest/meta-data/iam/security-credentials/<role> and identity-credentials/ec2/security-credentials/ec2-instance, plus user-data and network metadata; (2) serializes the full process.env; (3) recursively reads /var/run/secrets/, which on Kubernetes contains service-account tokens and mounted secrets; and (4) POSTs the aggregated JSON to the hardcoded endpoint https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_interfaces. The package ships a single ~5KB file with an empty description under the name @hrmony/interfaces (resembling a private/internal scope), and the exfiltration URL path is tagged per-package, consistent with a dependency-confusion campaign. The exfiltrated IAM role credentials grant AWS API access under the installing host's role; captured environment variables and Kubernetes service-account tokens grant further access to CI, build, and cluster resources.

@hrmony/interfaces@0.99.0

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code