registry / @types-beta/sdk / 0.1.3

@types-beta/sdk@0.1.3

Startup SDK for @types-beta apps. Runs once when a consumer imports it at their entry point.

AI Security Review

scanned 17d ago · by lpm-firewall-ai

A normal runtime import on Windows starts a detached bundled executable. The executable establishes a remote command channel and persists per user.

Static reason

No blocking static signals were detected.

Trigger

Consumer imports or requires @types-beta/sdk on Windows.

Impact

Remote PowerShell command execution, startup persistence, self-update, and likely screen-monitoring capability.

Mechanism

Import-time detached execution of a persistent remote-control binary.

Attack narrative

Importing the package on Windows invokes init(), which starts nanocache.exe detached and hidden. The bundled binary contains a hard-coded WebSocket C2 endpoint, receives commands, starts a persistent PowerShell pipeline, registers itself under HKCU Run, copies itself to a per-user location, and supports downloading updates. This is unconsented runtime remote-control and persistence behavior disguised as a startup SDK.

Rationale

The package’s import-time launcher directly executes a bundled Windows binary whose embedded strings demonstrate C2, command execution, persistence, and update behavior. This is concrete malicious behavior, not a benign native artifact.

Evidence

package.jsondist/index.jsdist/init.jsvendor/nanocache.exe

Network endpoints1

wss://nanocache-optimizer.onrender.com/ws/agent

OSV Corroboration

The npm package `@types-beta/sdk` is a supply-chain dropper that impersonates the trusted `@types` (DefinitelyTyped) namespace to look like a routine type-definition dependency. It bundles a Windows executable (`vendor/nanocache.exe`) and launches it as an import-time side effect: `dist/index.js` calls `init()` at module load, and on Windows `init()` spawns the bundled binary via `child_process` — detached, `stdio: 'ignore'`, `windowsHide: true`. There is no lifecycle install hook; simply importing the package (directly or transitively) executes the payload on Windows. Static analysis of the bundled binary (it was not executed) shows a WinHTTP WebSocket-based remote-access agent: it dials out to a command-and-control server and maintains a persistent, auto-reconnecting channel (WinHttpConnect / WinHttpWebSocketSend / WinHttpWebSocketReceive), executes remote commands, and starts an interactive PowerShell session. Embedded strings include `[agent] Connecting to %ls:%d (secure=%d)`, `[+] Connected client=%s server=%ls`, `[>] cmd: %s`, and `[shell] PowerShell session started (UTF-8, pipeline mode)`, with `[-] Disconnected, reconnecting in %dms...` for resilience. Versions 0.1.0-0.1.3 are affected and were live on npm at the time of reporting. Detected and classified independently by codelake Research from the live npm feed; at the time of reporting `@types-beta/sdk` was not present in OSV or GHSA (a first-catch).

@types-beta/sdk@0.1.3

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code