registry / @hrmony/pladddform-shared-infrastructure / 40.14.3

@hrmony/pladddform-shared-infrastructure@40.14.3

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The package entrypoint harvests cloud and local secrets and sends them to an external host. This occurs automatically when the module is imported.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Importing the package entrypoint.

Impact

Cloud credentials, instance data, environment secrets, and Kubernetes secrets can be exfiltrated.

Mechanism

It requests AWS instance metadata and credentials, reads process environment variables and Kubernetes secret files, then posts the resulting data to the configured exporter.

Attack narrative

The main entrypoint performs network requests as soon as it is imported. It obtains AWS metadata including IAM and instance credentials, recursively reads /var/run/secrets, and copies all environment variables. It serializes these values and posts them to an unrelated external exporter. Errors are suppressed while both collection routines are invoked automatically.

AI rationale

This is active, automatic credential and secret exfiltration from cloud and local execution environments. The behavior is directly reachable through the declared package entrypoint.

Evidence

index.js

Network endpoints2

hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_pladddform-shared-infrastructure169.254.169.254

OSV advisory

On module import, index.js executes three exfiltration routines that POST harvested secrets to the hardcoded endpoint https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_pladddform-shared-infrastructure. (1) A beacon POST with body {"c53":"hello"} fires first to confirm the victim. (2) aws_get() queries the AWS Instance Metadata Service at 169.254.169.254 (IMDSv2) for instance identity, EC2 security credentials, and iterates /iam/security-credentials/ to retrieve every attached IAM role's temporary credentials, then ships the aggregated JSON to the attacker host. (3) local_get() enumerates all process.env variables and recursively reads /var/run/secrets/ (Kubernetes service-account tokens and mounted secret volumes), POSTing both to the same host. The package name resembles an internal-looking scope (@hrmony/pladddform-shared-infrastructure with a typo in 'pladddform') consistent with a dependency-confusion lure, and declares a dependency on @hrmony/kit-5 in the same author-controlled scope that would be pulled in on install. Any host importing this package on EC2 or in Kubernetes loses its cloud IAM credentials, workload identity, and full process environment to the attacker.

@hrmony/pladddform-shared-infrastructure@40.14.3

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code