registry / Malware / @worrisome/aaaa

@worrisome/aaaa

This report shows the evidence for @worrisome/aaaa@1.0.0. 1 of 3 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The concealed remote redirect chain is concrete harmful behavior, even though it is not triggered during npm installation. The package should be blocked as a browser-delivered malicious payload.

Static reason

One or more suspicious static signals were detected.

Trigger

A user opens index.html in a browser.

Impact

Visitors can be silently sent to an attacker-controlled destination selected at runtime.

Mechanism

Obfuscated remote URL resolution, AES decryption, and browser redirection.

Attack narrative

The package is an HTML payload rather than a usable npm library. When opened, its inline script loads a challenge page, obtains data from a dynamically resolved remote host, base64-decodes and AES-decrypts it into a URL, then replaces the browser location. The destination is intentionally concealed, preventing a consumer from evaluating where the page sends users.

AI rationale

The concealed remote redirect chain is concrete harmful behavior, even though it is not triggered during npm installation. The package should be blocked as a browser-delivered malicious payload.

Evidence

package.jsonindex.html

Network endpoints1

challenges.cloudflare.com/turnstile/v0/api.js

Decision evidence

public snapshot

AI called this Malicious at 96.0% confidence as Malware with low false-positive risk.

Evidence for block

The manifest exposes an HTML file containing a large deliberately obfuscated script.
The script decodes data, uses AES-CTR decryption, and converts the result into a URL.
The script resolves a remote host and replaces the browser location with that result.
The page loads a third-party Turnstile script and presents a Cloudflare-style challenge.

Evidence against

There are no npm lifecycle scripts or dependencies in the manifest.
No local file harvesting, shell execution, or project-file mutation was found.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

MinifiedPossibleObfuscation

Manifest

NoLicense

scanned 1 file(s), 68.4 KB of source

Source & flagged code

7 flagged

index.htmlView file

182} L183: (function(_0x13ea8d,_0x1889ff){const _0x9232e5={_0x377a13:0x1ab,_0x42f7cf:0x1bd,_0x4cf9e1:0x1f7,_0x12021a:0x217,_0x4a2e6a:0x25c,_0x277722:0xf2,_0x4a5f6c:0x183,_0x4c0ae0:0xbb,_0x455...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

index.htmlView on unpkg · L182

•stage = html_entrypoint_analysis; reason = referenced_script_not_statically_covered; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

index.htmlView on unpkg

183function decodeBase64(_0x20edea){

High

Ai Review Evidence

The script decodes data, uses AES-CTR decryption, and converts the result into a URL.

index.htmlView on unpkg · L183

183='AES-CTR';const _0x4a15be=await crypto

High

Ai Review Evidence

The script decodes data, uses AES-CTR decryption, and converts the result into a URL.

index.htmlView on unpkg · L183

183const hostUrlPromise=resolveHostUrl(),checkPromise=hostUrlPromise

High

Ai Review Evidence

The script resolves a remote host and replaces the browser location with that result.

index.htmlView on unpkg · L183

10<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>

High

Ai Review Evidence

The page loads a third-party Turnstile script and presents a Cloudflare-style challenge.

index.htmlView on unpkg · L10

package.jsonView file

1{ "name": "@worrisome/aaaa", "version": "1.0.0", "main": "index.html", "files": [ "index.html" ] }

High

Ai Review Evidence

The manifest exposes an HTML file containing a large deliberately obfuscated script.

package.jsonView on unpkg · L1

Source & flagged code

7 flagged · loading source

index.htmlView file

182} L183: (function(_0x13ea8d,_0x1889ff){const _0x9232e5={_0x377a13:0x1ab,_0x42f7cf:0x1bd,_0x4cf9e1:0x1f7,_0x12021a:0x217,_0x4a2e6a:0x25c,_0x277722:0xf2,_0x4a5f6c:0x183,_0x4c0ae0:0xbb,_0x455...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

index.htmlView on unpkg · L182

•stage = html_entrypoint_analysis; reason = referenced_script_not_statically_covered; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

index.htmlView on unpkg

183function decodeBase64(_0x20edea){

High

Ai Review Evidence

The script decodes data, uses AES-CTR decryption, and converts the result into a URL.

index.htmlView on unpkg · L183

183='AES-CTR';const _0x4a15be=await crypto

Findings

7 High1 Medium1 Low

HighObfuscated Payload Loaderindex.html

HighSemantic Analysis Limitedindex.html

HighAi Review Evidencepackage.json

HighAi Review Evidenceindex.html

MediumStructural Risk Force Deep Review

LowNo License

Affected versions and remediation

This report applies to @worrisome/aaaa@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing @worrisome/aaaa@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-08 01:51:09.522Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

0.0.1-securitylatestUnknown—AllowUnder ReviewOct 21, 2026, 9:20 PM 0.0.0-stageClean—AllowPublishedOct 21, 2026, 9:19 PM 1.0.0shownMaliciousMalwareBlockPublishedSep 8, 2026, 1:45 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

More from @worrisome

Other malware packages

Source & flagged code

Related packages

More from @worrisome

Other malware packages