adbf@1.0.128
adbf
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe only runtime entry is an obfuscated bundle with a Telegram endpoint and process spawn, plus a separate base64 shell that force-pushes git history, but that file is not referenced. That is an inert payload and unresolved dual-use runtime, not a proven install-time or automatic attack.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the adbf command or otherwise loads index.js. Nothing in the inspected source loads atob.txt.
Impact
The CLI executes hidden bundle logic that static review cannot fully resolve. The encoded shell would rewrite the local git directory and force-push to the author remote only if some other code decoded and executed it.
Mechanism
index.js is obfuscated and includes https://api.telegram.org, child_process spawn, and filesystem reads. atob.txt decodes to git init, commit, and force-push commands but is not referenced by the bundle.
AI rationale
The only runtime entry is an obfuscated bundle with a Telegram endpoint and process spawn, plus a separate base64 shell that force-pushes git history, but that file is not referenced. That is an inert payload and unresolved dual-use runtime, not a proven install-time or automatic attack.
Evidence
index.jsatob.txtbin/adbf
Network endpoints1
api.telegram.org
Decision evidence
public snapshotAI called this Suspicious at 66.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The adbf bin loads index.js on user invocation, and that file is a single-line obfuscated bundle.
- The bundle embeds filesystem, crypto, child_process spawn, and a Telegram client whose string table includes https://api.telegram.org.
- atob.txt is base64 for a shell sequence that deletes .git, bumps the npm version, and force-pushes the tree to git@github.com:necdetuygur/adbf.git.
- No package source path references atob.txt, so that script is not shown to run from install or import.
Evidence against
- package.json defines lint and test scripts only, with no preinstall, install, or postinstall hook.
- Searches of index.js found no atob.txt path, git push text, or the encoded payload bytes.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystem
HighEntropyStringsObfuscatedUrlStrings
Source & flagged code
13 flagged · loading sourceindex.jsView file
1var a0_0x15cc74=a0_0x5a58;(function(_0x184c5f,_0x42a603){var _0x1088f6=a0_0x5a58,_0x16ec65=_0x184c5f();while(!![]){try{var _0x18f431=parseInt(_0x1088f6(0x20ae))/0x1+-parseInt(_0x10...
L2:
Critical
Command Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
index.jsView on unpkg · L11var a0_0x15cc74=a0_0x5a58;(function(_0x184c5f,_0x42a603){var _0x1088f6=a0_0x5a58,_0x16ec65=_0x184c5f();while(!![]){try{var _0x18f431=parseInt(_0x1088f6(0x20ae))/0x1+-parseInt(_0x10...
L2:
Critical
Browser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
index.jsView on unpkg · L11var a0_0x15cc74=a0_0x5a58;(function(_0x184c5f,_0x42a603){var _0x1088f6=a0_0x5a58,_0x16ec65=_0x184c5f();while(!![]){try{var _0x18f431=parseInt(_0x1088f6(0x20ae))/0x1+-parseInt(_0x10...
L2:
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
index.jsView on unpkg · L1Findings
5 Critical7 High4 Medium4 Low
CriticalCommand Output Exfiltrationindex.js
CriticalBrowser Credential Phishingindex.js
CriticalRemote Asset Decode Executeindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
CriticalPrevious Version Dangerous Deltaindex.js
HighEvalindex.js
HighSame File Env Network Executionindex.js
HighObfuscated Payload Loaderindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
HighBase64 Obscured Urlindex.js
HighObfuscated
HighSemantic Analysis Limitedindex.js
MediumDynamic Require
Affected versions and remediation
This report applies to adbf@1.0.128.
See all versions of adbf for other recorded verdicts.
- Review the evidence and your use of adbf@1.0.128 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.