registry / @woodpecker-web-shared/components / 4.20.5

@woodpecker-web-shared/components@4.20.5

AI Security Review

scanned 16d ago · by lpm-firewall-ai

An automatic install hook executes a system-information beacon. No user action is required beyond installing the package.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm runs the postinstall hook during package installation.

Impact

Installation discloses host and user environment metadata to an unrelated external recipient.

Mechanism

index.js collects local system metadata and sends it in an HTTPS POST request to a webhook.site endpoint.

Attack narrative

Installing the package invokes index.js through postinstall. That file collects the machine hostname, current account name, platform, architecture, working directory, Node version, and lifecycle event, serializes them, and sends them to a fixed webhook.site URL. This is unconsented install-time data exfiltration.

AI rationale

The package has a concrete automatic postinstall exfiltration path to an unrelated webhook endpoint. The collected host and user metadata is sent without user interaction or package-aligned purpose.

Evidence

package.jsonindex.js

Network endpoints1

webhook.site/d9bc4bcc-ce74-4193-ae4e-96d234bb2220

OSV advisory

OpenSSF/OSV

On `npm install`, the package's postinstall hook runs `node index.js`, which collects installer host identifiers (os.hostname(), os.userInfo().username, os.platform(), architecture, cwd, node version, npm_lifecycle_event) and POSTs them as JSON to a hardcoded third-party collector at https://webhook.site/d9bc4bcc-ce74-4193-ae4e-96d234bb2220. The payload includes a `src: 'loMesb'` tag consistent with a campaign identifier used to correlate exfiltrated data across victims. The @woodpecker-web-shared/components scope/name has no legitimate reason to transmit installer identity to an anonymous webhook collector at install time, and the behavior fires automatically without user interaction. This is a recon beacon consistent with a dependency-confusion or typosquat lure. ## Source: ghsa-malware (a8758860e4cd2b09cae7f28336690dd33e0ac17d6bb3a44990a74b0e8d009942) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

@woodpecker-web-shared/components@4.20.5

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code