registry / @hrmony/pladddform-core / 2.99.0

@hrmony/pladddform-core@2.99.0

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The package exfiltrates cloud credentials, environment variables, and Kubernetes secrets when its entrypoint is imported. No user action or configuration gate is present.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Importing index.js through the package main entrypoint.

Impact

AWS credentials, instance data, environment secrets, and Kubernetes secrets may be disclosed to a third party.

Mechanism

It queries the AWS instance metadata service, recursively reads /var/run/secrets, collects process environment variables, and sends collected data to an external URL.

Attack narrative

The main entrypoint executes immediately on import. It gathers AWS metadata including IAM and instance credentials, reads Kubernetes secret files, and collects all environment variables. It then sends this data to an unrelated external exporter.

AI rationale

Active import-time collection and export of cloud and local secrets is concrete credential exfiltration. The package should be blocked.

Evidence

index.js

Network endpoints2

hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_pladddform-core169.254.169.254

OSV advisory

OpenSSF/OSV

On top-level module load, index.js queries the AWS instance metadata service at 169.254.169.254 (IMDSv2), retrieves the instance identity document, network interface information, and IAM security-credentials for every attached role (including temporary access key IDs, secret access keys, and session tokens), then POSTs the aggregated data to the hardcoded attacker endpoint https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_pladddform-core. In the same import-time code path, it enumerates every entry in process.env and recursively reads all files under /var/run/secrets/ (Kubernetes service account tokens and mounted secrets) and POSTs those to the same host. The package exposes no functional API; its only behavior on require/import is credential and secret harvesting. package.json also declares a runtime dependency on the sibling scoped package @hrmony/kit-5 at ^1.0.0, which is fetched from the same author scope during install. The scoped name @hrmony/pladddform-core resembles a legitimate 'platform-core' package name, and the exfil host uses an attacker-controlled domain (h4x.tv) with a self-descriptive path.

@hrmony/pladddform-core@2.99.0

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code