registry / Credential exfiltration / @xylex-group/athena
@xylex-group/athena
Athena JS SDK
This report shows the evidence for @xylex-group/athena@5.5.4. 1 of 20 known versions is blocked or flagged. The newest version, 5.7.9, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe hard-coded non-package gateway is automatically selected and receives authentication and database credential material. The lack of installation hooks limits the trigger but does not remove the runtime exfiltration risk.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
An application creates or uses the gateway client without supplying a base URL and makes a gateway request.
Impact
Credential and database connection information may be disclosed to the external gateway.
Mechanism
Default credential-bearing requests to a hard-coded remote gateway
Attack narrative
A consumer that uses the normal gateway client without a configured base URL is silently directed to mirror2.athena-cluster.com. The same request-building path copies supplied bearer/session credentials, API keys, and PostgreSQL URI values into headers before fetch sends the request. This creates a concrete credential-exfiltration path during normal runtime use, without requiring an install hook.
AI rationale
The hard-coded non-package gateway is automatically selected and receives authentication and database credential material. The lack of installation hooks limits the trigger but does not remove the runtime exfiltration risk.
Evidence
dist/index.cjs
Network endpoints1
mirror2.athena-cluster.com
Decision evidence
public snapshotAI called this Malicious at 96.0% confidence as Malware with low false-positive risk.
Evidence for block
- The SDK hard-codes an external Athena gateway as its default URL.
- Runtime gateway calls use that default when no base URL is supplied, then send an HTTP request.
- Request construction forwards bearer and session credentials to gateway-profile requests.
- It also forwards API keys and PostgreSQL connection URIs in request headers.
Evidence against
- The manifest has no preinstall, install, postinstall, or prepare hook.
- The inspected dynamic Function use imports a named declared dependency rather than remote code.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flagged · loading sourcebin/athena-js-dev.mjsView file
5*/
L6: import { spawn } from "node:child_process";
L7: import path from "node:path";
High
Child Process
Package source references child process execution.
bin/athena-js-dev.mjsView on unpkg · L5dist/next/server.jsView file
1import { createHash, createDecipheriv, randomBytes, createCipheriv, createHmac, timingSafeEqual as timingSafeEqual$1, randomUUID } from 'crypto';
L2: import { AsyncLocalStorage } from 'async_hooks';
...
L11: import { fileURLToPath } from 'url';
L12: import { execSync } from 'child_process';
L13:
...
L695: const social = normalizeSocialFromRaw(raw);
L696: const envForIdentity = options.env ?? process.env;
L697: const appIdentity = options.identity === void 0 ? resolveAthenaAppIdentity({
...
L819: function collapseSearchParams(params) {
L820: const merged = new URLSearchParams();
L821: for (const [key, value] of params.entries()) {
...
L1861: init_inspect();
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/next/server.jsView on unpkg · L1Findings
4 Critical7 High4 Medium5 Low
CriticalRemote Asset Decode Executedist/next/server.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
CriticalManifest Confusionpackage.json
CriticalPrevious Version Dangerous Deltadist/next/server.cjs
HighChild Processbin/athena-js-dev.mjs
HighShell
HighEvaldist/next/server.js
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/next/server.js
HighCloud Metadata Accessdist/next/server.js
HighCross File Remote Execution Contextdist/cli/index.cjs
MediumDynamic Requirebin/athena-js.js
Affected versions and remediation
This report applies to @xylex-group/athena@5.5.4.
The versions list below shows the verdict for each recorded version.
- Avoid installing @xylex-group/athena@5.5.4. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.