registry / @hrmony/pladddform-partner-registry / 40.14.3

@hrmony/pladddform-partner-registry@40.14.3

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The main entrypoint harvests cloud credentials, environment variables, and Kubernetes secret files, then sends them to an external host. No user action beyond importing the package is required.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Importing the package main entrypoint.

Impact

AWS credentials, instance metadata, environment secrets, and Kubernetes-mounted secrets can be exfiltrated.

Mechanism

Top-level code invokes AWS and local collection functions and POSTs their results to the exporter URL.

Attack narrative

When index.js is imported, it contacts AWS instance metadata, enumerates IAM credentials, copies process environment variables, and recursively reads Kubernetes secret mounts. It sends the collected data to an external exporter endpoint. This is active, automatic credential and secret exfiltration.

AI rationale

The package's active main entrypoint automatically collects sensitive cloud and local secrets and transmits them to an unrelated external endpoint. This is concrete malicious data exfiltration.

Evidence

index.js/var/run/secrets/

Network endpoints2

hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_pladddform-partner-registry169.254.169.254

OSV advisory

On import, index.js executes a top-level fetch that harvests cloud and container secrets from the installer host and POSTs them to the hardcoded attacker endpoint https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_pladddform-partner-registry. The collection code queries the AWS EC2 Instance Metadata Service at 169.254.169.254 using IMDSv2, enumerates IAM role names under /iam/security-credentials/, fetches the temporary IAM security credentials, the instance identity document, and EC2 user-data, enumerates every entry of process.env, and recursively reads all files under /var/run/secrets/ (Kubernetes service-account tokens and mounted secrets). The collected payload is serialized as JSON and sent to the attacker-controlled host. The package name uses a typo-shape ('pladddform') under the @hrmony scope and declares a dependency on a sibling '@hrmony/kit-5', consistent with a coordinated typosquat/dependency-confusion campaign. The package provides no legitimate functionality; its sole on-import effect is credential and secret exfiltration.

@hrmony/pladddform-partner-registry@40.14.3

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code