adbf@1.0.213
adbf
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package's declared runtime entrypoint starts an obfuscated server and forwards request-submitted data to a Telegram bot. This is concrete data exfiltration behavior, so the package should be blocked.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Importing the package starts the server; submitting data to its feedback route triggers the forwarding.
Impact
Submitted identifying and user-provided content is disclosed to the Telegram bot recipient.
Mechanism
The route passes request fields to a handler that combines them and sends the result through a bot client using Telegram's API.
Attack narrative
Importing the declared entrypoint starts a server. Its feedback handler forwards submitted whois, application, and content fields to a Telegram bot, disclosing that data to an external recipient.
AI rationale
The package's declared runtime entrypoint starts an obfuscated server and forwards request-submitted data to a Telegram bot. This is concrete data exfiltration behavior, so the package should be blocked.
Evidence
package.jsonindex.js
Network endpoints1
api.telegram.org
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json declares index.js as the package entrypoint.
- The entrypoint starts an HTTP server with permissive cross-origin access.
- A server route takes whois, application, and content fields from a request and passes them to a handler.
- That handler combines the submitted fields and sends them through a bot client.
- The bot client uses Telegram's API endpoint.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystem
HighEntropyStringsMinifiedObfuscatedUrlStrings
Oversized source lightweight scan
index.js7.17 MB file, sampled 256 KB
Source & flagged code
14 flagged · loading sourceindex.jsView file
1var a0_0x4e3088=a0_0x1a6d;(function(_0x53ba93,_0x31cb13){var _0x4c212f=a0_0x1a6d,_0x34548d=_0x53ba93();while(!![]){try{var _0x427dc1=-parseInt(_0x4c212f(0x57a4))/0x1+-parseInt(_0x4...
L2:
Critical
Command Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
index.jsView on unpkg · L11var a0_0x4e3088=a0_0x1a6d;(function(_0x53ba93,_0x31cb13){var _0x4c212f=a0_0x1a6d,_0x34548d=_0x53ba93();while(!![]){try{var _0x427dc1=-parseInt(_0x4c212f(0x57a4))/0x1+-parseInt(_0x4...
L2:
Critical
Browser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
index.jsView on unpkg · L11var a0_0x4e3088=a0_0x1a6d;(function(_0x53ba93,_0x31cb13){var _0x4c212f=a0_0x1a6d,_0x34548d=_0x53ba93();while(!![]){try{var _0x427dc1=-parseInt(_0x4c212f(0x57a4))/0x1+-parseInt(_0x4...
L2:
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
index.jsView on unpkg · L1Findings
5 Critical8 High4 Medium4 Low
CriticalCommand Output Exfiltrationindex.js
CriticalBrowser Credential Phishingindex.js
CriticalRemote Asset Decode Executeindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
CriticalPrevious Version Dangerous Deltaindex.js
HighChild Processindex.js
HighEvalindex.js
HighSame File Env Network Executionindex.js
HighCredential Redirect Persistenceindex.js
HighObfuscated Payload Loaderindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
HighObfuscated
High
Affected versions and remediation
This report applies to adbf@1.0.213.
See all versions of adbf for other recorded verdicts.
- Avoid installing adbf@1.0.213. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.