registry / @types-beta/sdk / 0.1.2

@types-beta/sdk@0.1.2

Startup SDK for @types-beta apps. Runs once when a consumer imports it at their entry point.

AI Security Review

scanned 17d ago · by lpm-firewall-ai

Importing the package on Windows launches a bundled detached executable. The executable exposes remote-shell, network, and persistence indicators.

Static reason

No blocking static signals were detected.

Trigger

A consumer imports or requires @types-beta/sdk on Windows.

Impact

Remote command execution, persistence, and potential host compromise.

Mechanism

silent detached execution of a bundled persistent remote-shell binary

Attack narrative

At application import time, dist/index.js calls init(), which spawns vendor/nanocache.exe detached with hidden stdio. Static strings in that executable show WinHTTP/WebSocket support, a persistent PowerShell command session, installation under APPDATA/LOCALAPPDATA, and HKCU Run registration. This is an unconsented malware execution chain rather than SDK initialization.

Rationale

The runtime import chain silently executes a bundled Windows binary whose static contents indicate remote command capability and persistence. The absence of an npm install hook does not mitigate the concrete import-time attack behavior.

Evidence

package.jsondist/index.jsdist/init.jsvendor/nanocache.exe

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-11499

Source

OpenSSF Malicious Packages via OSV

The npm package `@types-beta/sdk` is a supply-chain dropper that impersonates the trusted `@types` (DefinitelyTyped) namespace to look like a routine type-definition dependency. It bundles a Windows executable (`vendor/nanocache.exe`) and launches it as an import-time side effect: `dist/index.js` calls `init()` at module load, and on Windows `init()` spawns the bundled binary via `child_process` — detached, `stdio: 'ignore'`, `windowsHide: true`. There is no lifecycle install hook; simply importing the package (directly or transitively) executes the payload on Windows. Static analysis of the bundled binary (it was not executed) shows a WinHTTP WebSocket-based remote-access agent: it dials out to a command-and-control server and maintains a persistent, auto-reconnecting channel (WinHttpConnect / WinHttpWebSocketSend / WinHttpWebSocketReceive), executes remote commands, and starts an interactive PowerShell session. Embedded strings include `[agent] Connecting to %ls:%d (secure=%d)`, `[+] Connected client=%s server=%ls`, `[>] cmd: %s`, and `[shell] PowerShell session started (UTF-8, pipeline mode)`, with `[-] Disconnected, reconnecting in %dms...` for resilience. Versions 0.1.0-0.1.3 are affected and were live on npm at the time of reporting. Detected and classified independently by codelake Research from the live npm feed; at the time of reporting `@types-beta/sdk` was not present in OSV or GHSA (a first-catch).

@types-beta/sdk@0.1.2

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code