registry / Credential exfiltration / ably-bulk-subscriber
ably-bulk-subscriber
This report shows the evidence for ably-bulk-subscriber@1.0.1. 1 of 2 known versions is blocked or flagged. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package contains an automatic install hook with concrete secret disclosure and filesystem persistence. The absence of network code does not remove the install-time credential-harvesting behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
npm postinstall
Impact
Exposes DEMO_ABLY_KEY to install logs and /tmp/dependency-confusion-proof.txt.
Mechanism
environment-secret harvesting and local disclosure
Attack narrative
Installing the package invokes node poc.js through postinstall. The script reads DEMO_ABLY_KEY, prints the value to stdout, and writes it to a predictable /tmp file. This is concrete automatic credential exposure during installation, even though the script calls itself a proof of concept.
AI rationale
The package contains an automatic install hook with concrete secret disclosure and filesystem persistence. The absence of network code does not remove the install-time credential-harvesting behavior.
Evidence
package.jsonpoc.js/tmp/dependency-confusion-proof.txt
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- Install-time postinstall runs poc.js.
- poc.js reads DEMO_ABLY_KEY, prints its value, and writes it to /tmp.
Evidence against
- No network endpoint or remote payload execution is present.
- The behavior is labeled as a dependency-confusion PoC, but it still runs automatically at install time.
Behavioral surface
EnvironmentVarsFilesystem
Source & flagged code
2 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node poc.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg11"main": "index.js",
"scripts": {
"postinstall": "node poc.js"
}
High
Findings
2 High1 Medium2 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSuspicious Lifecycle Evidencepackage.json
MediumEnvironment Vars
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to ably-bulk-subscriber@1.0.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing ably-bulk-subscriber@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.