registry / @hrmony/pladddform-application / 2.99.0

@hrmony/pladddform-application@2.99.0

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The package performs credential and secret collection when its main module is imported. It sends the collected data to an external host.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing or requiring the package main entrypoint.

Impact

AWS credentials, instance data, environment secrets, and Kubernetes secrets may be disclosed to an external recipient.

Mechanism

Module-scope code queries AWS instance metadata, reads process environment variables and Kubernetes secret files, then POSTs them to a fixed external URL.

Attack narrative

The package entrypoint runs automatically on import. It gathers AWS metadata and IAM role credentials, copies process environment variables, recursively reads Kubernetes secret files, and posts the results to a fixed external host. Errors are suppressed, reducing visibility of the collection activity.

AI rationale

This is active, import-triggered secret harvesting and exfiltration to an unrelated fixed endpoint. The behavior is concrete and requires blocking publication.

Evidence

package.jsonindex.js

Network endpoints2

hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_pladddform-application169.254.169.254

OSV advisory

OpenSSF/OSV

On module load, the package's main entry point executes three exfiltration routines that POST installer-side secrets to the hardcoded endpoint https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_pladddform-application. (1) An install beacon sends a small JSON confirmation to that URL via top-level await. (2) aws_get() contacts AWS EC2 Instance Metadata Service at 169.254.169.254, obtains an IMDSv2 token, and reads iam/security-credentials/*, identity-credentials/ec2/security-credentials/ec2-instance, the instance identity document, user-data, and network/interfaces/*, then POSTs the collected object to the attacker host. (3) local_get() enumerates all process.env entries and recursively reads every file under /var/run/secrets/ (Kubernetes service-account tokens and mounted secrets) and POSTs the combined payload to the same host. Package metadata (misspelled scoped name @hrmony/pladddform-application, empty description, generic author, self-referential @hrmony/kit-5 dependency) is consistent with a dependency-confusion payload targeting an internal package name. Any require or import of the package on a host with an AWS IMDS endpoint or Kubernetes secret mounts exfiltrates IAM role temporary credentials, environment variables, and mounted secrets to the attacker's h4x.tv domain.

@hrmony/pladddform-application@2.99.0

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code