registry / @woodpecker-web-shared/components / 2.20.5

@woodpecker-web-shared/components@2.20.5

AI Security Review

scanned 16d ago · by lpm-firewall-ai

An automatic install hook sends host and user environment metadata to an unrelated webhook. This is a confirmed install-time data exfiltration surface.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall runs node index.js.

Impact

Installing the package discloses identifying machine and project-location metadata to the webhook operator.

Mechanism

The entrypoint gathers system metadata, serializes it, and sends it by HTTPS POST to the configured webhook.

Attack narrative

On installation, the postinstall hook executes index.js. It gathers the hostname, current username, platform, architecture, working directory, Node version, and lifecycle event, then posts the JSON payload to a webhook.site URL. The request is invoked immediately without user action or destination restriction.

AI rationale

The package has an automatic postinstall beacon that exfiltrates local system and project metadata to a third-party endpoint. This is concrete malicious install-time data collection.

Evidence

package.jsonindex.js

Network endpoints1

webhook.site/d9bc4bcc-ce74-4193-ae4e-96d234bb2220

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-16354

On `npm install`, the package's postinstall hook runs `node index.js`, which collects installer host identifiers (os.hostname(), os.userInfo().username, os.platform(), architecture, cwd, node version, npm_lifecycle_event) and POSTs them as JSON to a hardcoded third-party collector at https://webhook.site/d9bc4bcc-ce74-4193-ae4e-96d234bb2220. The payload includes a `src: 'loMesb'` tag consistent with a campaign identifier used to correlate exfiltrated data across victims. The @woodpecker-web-shared/components scope/name has no legitimate reason to transmit installer identity to an anonymous webhook collector at install time, and the behavior fires automatically without user interaction. This is a recon beacon consistent with a dependency-confusion or typosquat lure. ## Source: ghsa-malware (a8758860e4cd2b09cae7f28336690dd33e0ac17d6bb3a44990a74b0e8d009942) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

@woodpecker-web-shared/components@2.20.5

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code