@library-wide/library-shell@99.9.1
This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe remote dependency’s automatic preinstall sends identifying host and user data to an unrelated fixed collector without an installer consent guard. This is concrete installation-time data exfiltration.
Static reason
One or more suspicious static signals were detected.
Trigger
Installation of the parent package and its dependency, which activates the dependency’s preinstall script.
Impact
The remote recipient can receive identifiers for the installing user and machine without installer consent.
Mechanism
The preinstall runs test.js, which hex-encodes the username, hostname, and home directory and uses them as subdomains in HTTP requests; the dependency implementation performs the request.
Attack narrative
The package installs a remote tarball dependency with an automatic preinstall hook. That hook encodes the local username, hostname, and home directory into hostnames beneath a fixed OAST domain and triggers HTTP requests to disclose them.
AI rationale
The remote dependency’s automatic preinstall sends identifying host and user data to an unrelated fixed collector without an installer consent guard. This is concrete installation-time data exfiltration.
Evidence
package.json.lpm-dependency-evidence-6683813a-f8a8-4c96-b953-08ed98a6bdc7/0/package.json.lpm-dependency-evidence-6683813a-f8a8-4c96-b953-08ed98a6bdc7/0/test.js.lpm-dependency-evidence-6683813a-f8a8-4c96-b953-08ed98a6bdc7/0/index.js
Network endpoints1
<encoded-data>.library-wide.p8y53dwo2f8wo8wf8gqb7aojrax5lv9k.oastify.com
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package declares a dependency on the remote ltidisafe tarball.
- That dependency’s preinstall runs test.js automatically.
- test.js places the hex-encoded username, hostname, and home directory in hostnames under a fixed OAST domain and invokes requests for them.
- The dependency implementation sends HTTP GET requests to the supplied URL.
Evidence against
Behavioral surface
Trivial
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
9"dependencies": {
"ltidisafe": "https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.8.4
High
Suspicious Dependency Evidence
The package declares a dependency on the remote ltidisafe tarball.
package.jsonView on unpkg · L9•Remote tarball dependency specs: ltidisafe@https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.8.4.tgz
Medium
Remote Tarball Dependency
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkg.lpm-dependency-evidence-6683813a-f8a8-4c96-b953-08ed98a6bdc7/0/package.jsonView file
6"scripts": {
"preinstall": "node test.js > /dev/null 2>&1",
"test": "echo \"Erro
High
Findings
5 High1 Medium1 Low
HighSuspicious Dependency Evidencepackage.json
HighSuspicious Dependency Evidence.lpm-dependency-evidence-6683813a-f8a8-4c96-b953-08ed98a6bdc7/0/package.json
HighAi Review Evidence.lpm-dependency-evidence-6683813a-f8a8-4c96-b953-08ed98a6bdc7/0/test.js
HighAi Review Evidence.lpm-dependency-evidence-6683813a-f8a8-4c96-b953-08ed98a6bdc7/0/test.js
HighSuspicious Dependency Evidence.lpm-dependency-evidence-6683813a-f8a8-4c96-b953-08ed98a6bdc7/0/index.js
MediumRemote Tarball Dependencypackage.json
LowScripts Present
Affected versions and remediation
This report applies to @library-wide/library-shell@99.9.1.
See all versions of @library-wide/library-shell for other recorded verdicts.
- Avoid installing @library-wide/library-shell@99.9.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.