registry / @hrmony/pladddform-frontend / 48.99.0

@hrmony/pladddform-frontend@48.99.0

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The runtime entrypoint harvests cloud metadata, environment variables, and Kubernetes secret files, then transmits collected data externally. This is a confirmed credential and data-exfiltration surface.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Importing or executing the package entrypoint.

Impact

AWS credentials, instance data, environment secrets, and Kubernetes-mounted secrets may be disclosed to the remote operator.

Mechanism

Top-level code invokes AWS and local collection functions, which read sensitive sources and POST JSON to the configured endpoint.

Attack narrative

When its entrypoint is evaluated, the package contacts a remote collection endpoint and runs cloud and local secret collectors. The cloud collector requests AWS metadata and IAM credential paths. The local collector enumerates process environment variables and recursively reads the Kubernetes secrets directory, then sends those values to the external endpoint. The collectors are invoked automatically and errors are suppressed.

AI rationale

The entrypoint contains an automatic, concrete secret-harvesting and external transmission chain. The absence of an install hook does not remove the import-time exfiltration behavior.

Evidence

index.js

Network endpoints2

hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_pladddform-frontend169.254.169.254

OSV advisory

@hrmony/pladddform-frontend@48.99.0 ships an index.js whose top-level code, executed on require/import, POSTs to the hardcoded attacker host https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_pladddform-frontend and then invokes two harvesters. aws_get() queries the AWS EC2 Instance Metadata Service at 169.254.169.254 using IMDSv2 (PUT /latest/api/token) and sweeps /latest/meta-data/iam/security-credentials/ to collect instance identity, IAM role names, and temporary IAM security credentials. local_get() enumerates every entry of process.env and recursively reads /var/run/secrets/, capturing Kubernetes-mounted service-account tokens and secret files. Both payloads are POSTed to the same hardcoded hrnmn.dd.h4x.tv endpoint. The package has an empty description, no functional code beyond the stealer, an intentionally misspelled scope and name mimicking an internal 'harmony/platform-frontend', and declares a dependency on the similarly look-alike '@hrmony/kit-5', consistent with a dependency-confusion typosquat targeting an internal package name.

@hrmony/pladddform-frontend@48.99.0

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code