registry / adbf / 1.0.94

adbf@1.0.94

adbf

AI Security Review

scanned 29d ago · by lpm-firewall-ai

Running adbf launches an obfuscated HTTP service with a /chat proxy backed by an embedded credential. No install-time attack surface or confirmed host-file/credential theft was established.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs adbf or imports index.js; a caller then POSTs to /chat.

Impact

Unexpected network-capable service and third-party forwarding of submitted chat content.

Mechanism

Automatic web server and hidden OpenAI-compatible chat relay.

Rationale

The source establishes a real, unexpected runtime proxy and automatic server, warranting a warning. It does not establish concrete malicious theft, persistence, or install-time behavior sufficient for a block.

Evidence

package.jsonbin/adbfindex.jsREADME.mddocker-compose.ymlatob.txt

Network endpoints2

api.openai.com/v1api.groq.com

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

index.js is a 6.8 MB heavily obfuscated bundle, unrelated to the minimal README.
Importing index.js starts an Express server on process.env.PORT.
The /chat handler forwards caller-supplied messages to a hidden-base-URL OpenAI-compatible client using an embedded API key.
atob.txt contains a destructive git reset/reinit/force-push command sequence, though no source reference was found.

Evidence against

package.json has no preinstall, install, or postinstall hooks.
bin/adbf only requires the package; no install-time command is present.
No source-backed credential harvesting, local command execution, or exfiltration chain was confirmed.
The chat forwarding occurs only after a request to the runtime /chat endpoint.

Behavioral surface

Source

DynamicRequireEnvironmentVarsEvalFilesystem

Supply chain

HighEntropyStringsObfuscated

ManifestNo manifest risk signals triggered.

Source & flagged code

8 flagged

index.jsView file

1var a0_0x29017b=a0_0x5df5;(function(_0x3ddfc2,_0x167bf7){var _0x2c48a0=a0_0x5df5,_0x2b4428=_0x3ddfc2();while(!![]){try{var _0x11b5db=-parseInt(_0x2c48a0(0x573b))/0x1*(parseInt(_0x2... L2:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L1

1var a0_0x29017b=a0_0x5df5;(function(_0x3ddfc2,_0x167bf7){var _0x2c48a0=a0_0x5df5,_0x2b4428=_0x3ddfc2();while(!![]){try{var _0x11b5db=-parseInt(_0x2c48a0(0x573b))/0x1*(parseInt(_0x2... L2:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

index.jsView on unpkg · L1

1var a0_0x29017b=a0_0x5df5;(function(_0x3ddfc2,_0x167bf7){var _0x2c48a0=a0_0x5df5,_0x2b4428=_0x3ddfc2();while(!![]){try{var _0x11b5db=-parseInt(_0x2c48a0(0x573b))/0x1*(parseInt(_0x2... L2:

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

index.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.main -> index.js L1: var a0_0x29017b=a0_0x5df5;(function(_0x3ddfc2,_0x167bf7){var _0x2c48a0=a0_0x5df5,_0x2b4428=_0x3ddfc2();while(!![]){try{var _0x11b5db=-parseInt(_0x2c48a0(0x573b))/0x1*(parseInt(_0x2... L2:

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

index.jsView on unpkg · L1

1var a0_0x29017b=a0_0x5df5;(function(_0x3ddfc2,_0x167bf7){var _0x2c48a0=a0_0x5df5,_0x2b4428=_0x3ddfc2();while(!![]){try{var _0x11b5db=-parseInt(_0x2c48a0(0x573b))/0x1*(parseInt(_0x2... L2:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L1

•path = index.js kind = oversized_source_file sizeBytes = 6803665 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

index.jsView on unpkg

1var a0_0x29017b=a0_0x5df5;(function(_0x3ddfc2,_0x167bf7){var _0x2c48a0=a0_0x5df5,_0x2b4428=_0x3ddfc2();while(!![]){try{var _0x11b5db=-parseInt(_0x2c48a0(0x573b))/0x1*(parseInt(_0x2... L2:

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.jsView on unpkg · L1

1var a0_0x29017b=a0_0x5df5;(function(_0x3ddfc2,_0x167bf7){var _0x2c48a0=a0_0x5df5,_0x2b4428=_0x3ddfc2();while(!![]){try{var _0x11b5db=-parseInt(_0x2c48a0(0x573b))/0x1*(parseInt(_0x2... L2:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

index.jsView on unpkg · L1

Source & flagged code

8 flagged · loading source

index.jsView file

1var a0_0x29017b=a0_0x5df5;(function(_0x3ddfc2,_0x167bf7){var _0x2c48a0=a0_0x5df5,_0x2b4428=_0x3ddfc2();while(!![]){try{var _0x11b5db=-parseInt(_0x2c48a0(0x573b))/0x1*(parseInt(_0x2... L2:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L1

1var a0_0x29017b=a0_0x5df5;(function(_0x3ddfc2,_0x167bf7){var _0x2c48a0=a0_0x5df5,_0x2b4428=_0x3ddfc2();while(!![]){try{var _0x11b5db=-parseInt(_0x2c48a0(0x573b))/0x1*(parseInt(_0x2... L2:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

index.jsView on unpkg · L1

1var a0_0x29017b=a0_0x5df5;(function(_0x3ddfc2,_0x167bf7){var _0x2c48a0=a0_0x5df5,_0x2b4428=_0x3ddfc2();while(!![]){try{var _0x11b5db=-parseInt(_0x2c48a0(0x573b))/0x1*(parseInt(_0x2... L2:

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

index.jsView on unpkg · L1

Findings

5 High4 Medium5 Low

HighSame File Env Network Executionindex.js

HighCommand Output Exfiltrationindex.js

HighObfuscated Payload Loaderindex.js

HighTrigger Reachable Command Output Exfiltrationindex.js

HighObfuscated

MediumDynamic Requireindex.js

MediumEnvironment Vars

MediumOversized Source Fileindex.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalindex.js

LowWeak Cryptoindex.js

LowFilesystem

LowHigh Entropy Strings