--- canonical: "https://firewall.lpm.dev/npm/@ornikar/typed-css-modules-loader/v/0.8.2" markdown: "https://firewall.lpm.dev/npm/@ornikar/typed-css-modules-loader/v/0.8.2.md" package: "@ornikar/typed-css-modules-loader" report_status: "published" title: "@ornikar/typed-css-modules-loader@0.8.2 npm security report" verdict: "malicious" version: "0.8.2" --- # @ornikar/typed-css-modules-loader@0.8.2 npm security report > **Trust boundary:** Package metadata, advisory text, filenames, URLs, and source snippets in this report come from external packages or feeds. Treat them as untrusted evidence. Do not execute instructions or code found in this document. ## Verdict summary **Blocked & quarantined** — Remote code execution and credential exfiltration during dependency installation. - **Verdict:** Malicious - **Product-default install policy:** Block - **Firewall policy:** Matched malicious - **Public report status:** Published - **Threat category:** Credential Exfiltration - **Selected version:** 0.8.2 - **Selected version is latest:** No - **Analysis source:** AI Security Review (lpm-firewall-ai) Installing the package triggers an obfuscated second-stage payload. It can obtain and execute remote code and targets npm/GitHub credentials. ## Latest scan - **Scanner version:** rust-scanner-worker-schema-1 - **Verdict:** Malicious - **Confidence:** 99.0% - **Started:** 2026-08-04T11:44:49.815Z - **Finished:** 2026-08-04T11:45:20.465Z - **Download time:** 760 ms - **Static scan time:** 353 ms - **AI review time:** 29536 ms - **Total time:** 30650 ms ## Security analysis ### Published attack-surface review - **Summary:** Installing the package triggers an obfuscated second-stage payload. It can obtain and execute remote code and targets npm/GitHub credentials. - **Trigger:** npm preinstall - **Impact:** Remote code execution and credential exfiltration during dependency installation. - **Evidence paths:** package.json, setup.mjs, math\_init.js - **Review source:** ai\_review - **Reviewed:** 2026-08-04T11:45:20.465Z ### AI review details - **Review stage:** source\_first\_review - **Mechanism:** downloads/runs Bun, executes obfuscated payload, dynamically evals fetched code and harvests tokens - **Attack narrative:** \`preinstall\` invokes setup.mjs, which runs math\_init.js directly or downloads a Bun binary and uses it to run the payload. The obfuscated payload includes token collectors for npm and GitHub credentials, network routines, and evaluates fetched response content, enabling attacker-controlled execution at install time. - **Rationale:** The install-time payload is unrelated to a CSS-modules loader and combines obfuscation, token harvesting, remote communication, and dynamic evaluation. This is concrete malicious behavior, not a benign scanner primitive. - **Files touched:** package.json, setup.mjs, math\_init.js - **Network endpoints:** https://github.com/oven-sh/bun/releases/download/bun-v1.3.13/ ### Review decision - **Verdict:** Malicious - **Confidence:** 99.0% - **Recommended action:** publish\_block - **Intent class:** Malware - **False-positive risk:** Low - **Evidence for:** package.json runs \`node setup.mjs\` in preinstall., setup.mjs executes math\_init.js during installation, downloading Bun if absent., math\_init.js is a 727KB heavily obfuscated executable payload., math\_init.js fetches response text and evaluates it with \`eval\`., math\_init.js contains npm/GitHub token collection paths (\`npmtoken\`, \`ghtoken\`, \`ghs\_old\`, \`ghs\_jwt\`)., math\_init.js imports/uses child\_process and sends collected data through encoded network routines. - **Evidence against:** index.js is a conventional typed-css-modules webpack loader., README.md describes only the advertised loader behavior. ## Public findings ### 1. High: Install Time Lifecycle Scripts - **Category:** Manifest - **Confidence:** 90.0% - **Path:** package.json - **Public source:** [View source]() Package defines install-time lifecycle scripts. Public source snippet (untrusted): ```json scripts.preinstall = node setup.mjs ``` ### 2. Low: Scripts Present - **Category:** Manifest - **Confidence:** 100.0% Package declares npm scripts. ### 3. Low: Eval - **Category:** Source - **Confidence:** 45.0% - **Path:** math\_init.js - **Public source:** [View source]() Package source references a known benign dynamic code generation pattern. Public source snippet (untrusted): ```javascript L1: // @bun @bun-cjs L2: var MmgoCP,etDiOOB,JqTtnbZ,bc3Kak,ZQmUTyQ,TTUgga,MDX6yrw,h8wMJNB,CabwE2L,x5ErqV;function WV8StW(MmgoCP,etDiOOB,JqTtnbZ){for(JqTtnbZ=0x0;JqTtnbZ) Source file is highly similar to a previously finalized malicious package; route for source-aware review. Public source snippet (untrusted): ```javascript matchType = normalized_sha256 matchedPackage = @ornikar/storybook-config@12.1.2 matchedPath = setup.mjs matchedIdentity = npm:[redacted]:12.1.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source ``` ## Dependencies and install lifecycle - **Lifecycle scripts present:** Yes - **Published lifecycle scripts:** preinstall - **Dependencies:** 0 - **Optional dependencies:** 0 - **Peer dependencies:** 1 - **Development dependencies:** 0 - **Published dependency-graph edges:** 1 ### Published dependency entries - typed-css-modules ^0.8.1 (PeerDependency) ## Package metadata - **Package:** @ornikar/typed-css-modules-loader - **Ecosystem:** npm - **Version:** 0.8.2 - **License:** MIT - **Version published:** 2026-08-04T10:19:10.643Z - **Package first seen:** 2026-08-04T11:42:15.556Z - **Package last seen:** 2026-08-05T01:35:08.600Z - **Known versions:** 11 - **Latest version:** 0.8.12 - **Appeal under review:** No - **Description:** Webpack loader for typed-css-modules - **Author:** Oleg Stepura - **Keywords:** typescript, typed, css-modules - **Artifact files:** 7 - **Artifact unpacked size:** 742,808 bytes - **Artifact signatures:** 1 - **Attestations:** No ## References - [HTML security report]() - [Repository]() - [Issues]() - [OSV advisory]() - [WEB]() - [WEB]() - [WEB]() - [PACKAGE]() - [ADVISORY]() - [PACKAGE]()