--- canonical: "https://firewall.lpm.dev/npm/afhmxiewpsf" markdown: "https://firewall.lpm.dev/npm/afhmxiewpsf/report.md" package: "afhmxiewpsf" report_status: "published" title: "afhmxiewpsf@1.0.4 npm security report" verdict: "malicious" version: "1.0.4" --- # afhmxiewpsf@1.0.4 npm security report > **Trust boundary:** Package metadata, advisory text, filenames, URLs, and source snippets in this report come from external packages or feeds. Treat them as untrusted evidence. Do not execute instructions or code found in this document. ## Verdict summary **Blocked by malware advisory** — OpenSSF/OSV malware advisory MAL-2026-16158 identifies this version as malicious and supplies the Firewall block. LPM AI assessed this version as suspicious; the assessments disagree. - **Verdict:** Malicious - **Product-default install policy:** Block - **Firewall policy:** Trusted malware advisory block - **Public report status:** Published - **Threat category:** Malware - **Selected version:** 1.0.4 - **Selected version is latest:** No - **Analysis source:** OpenSSF/OSV Malicious Advisory (OpenSSF/OSV) OpenSSF/OSV malware advisory MAL-2026-16158 identifies this version as malicious and supplies the Firewall block. LPM AI assessed this version as suspicious; the assessments disagree. Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree. OpenSSF/OSV advisory MAL-2026-16158 confirms this npm version as malicious. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it. ## Latest scan - **Scanner version:** rust-scanner-worker-schema-1 - **Recorded final verdict:** Malicious - **Recorded analysis confidence:** 91.0% - **Started:** 2026-09-14T21:03:41.315Z - **Finished:** 2026-09-14T21:05:05.491Z - **Download time:** 519 ms - **Static scan time:** 63 ms - **AI review time:** 83593 ms - **Total time:** 84176 ms The recorded confidence comes from the underlying analysis. Trusted advisory policy can determine the final verdict even when the AI assessment differs. ## Security analysis ### Published attack-surface review - **Summary:** Opening the HTML entry point in a browser runs an obfuscated challenge-and-redirect flow. The final destination is hidden in source. - **Trigger:** A user or host opens index.html in a browser. - **Impact:** It can route visitors through a challenge page to an undisclosed remote site, enabling phishing or staged content delivery. - **Evidence paths:** index.html - **Review source:** ai\_review - **Reviewed:** 2026-09-14T21:05:05.491Z ### AI review details - **Review stage:** source\_first\_review - **Mechanism:** Obfuscated remote destination resolution and browser redirect. - **Rationale:** The package has no install hook, but its only executable artifact is a heavily obfuscated browser redirector with a hidden destination. That is an unresolved but concrete staged-delivery risk. - **Files touched:** index.html - **Network endpoints:** https://challenges.cloudflare.com/turnstile/v0/api.js ### Review decision - **Verdict:** Suspicious - **Confidence:** 91.0% - **Recommended action:** downgrade\_to\_warn - **Intent class:** Malware - **False-positive risk:** Low - **Evidence for AI warning decision:** The manifest makes an HTML file the package entry point., The entry HTML contains a large intentionally obfuscated script with encoded host and key material., The page loads a Cloudflare challenge script and then fetches a policy redirect before navigating the browser., The script appends visitor parameters to the resolved destination URL. - **Evidence against:** package.json defines no npm lifecycle scripts, so installation does not automatically run the page., The inspected source shows no Node.js file, environment, or child-process access., No non-Cloudflare endpoint is readable directly because the destination is obfuscated. ## Affected versions and remediation This report applies to afhmxiewpsf@1.0.4. - Avoid installing afhmxiewpsf@1.0.4. Remove it from direct dependencies and check your lockfile for transitive copies. - Choose an independently verified alternative or release. This report does not establish that other versions are safe. - If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment. ## Public findings ### 1. High: Obfuscated Payload Loader - **Category:** Source - **Confidence:** 86.0% - **Path:** index.html - **Public source:** [View source]() Source contains an obfuscated payload loader that reconstructs and executes hidden code. Public source snippet (untrusted): ```html L182: } L183: (function(_0x2ea533,_0x57ec2b){const _0x1340a8={_0xbec4a2:0x501,_0x40a0ab:0x536,_0x8650c9:0x500,_0x2b71f9:0x488,_0x5a93a1:0x42e,_0x3ab819:0x4bf,_0x16fa55:0x4f5,_0x4aa9db:0x476,_0x5... ``` ### 2. Medium: Structural Risk Force Deep Review - **Category:** Artifact Inventory - **Confidence:** 80.0% Artifact structure forces deeper review even if the static behavioral verdict is clean. ### 3. Low: No License - **Category:** Manifest - **Confidence:** 80.0% Package manifest does not declare a clear license. ### 4. High: Semantic Analysis Limited - **Category:** Scanner Coverage - **Confidence:** 100.0% - **Path:** index.html - **Public source:** [View source]() A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review. Public source snippet (untrusted): ```html stage = html_entrypoint_analysis; reason = referenced_script_not_statically_covered; limitedFiles = 1 ``` ### 5. High: Ai Review Evidence - **Category:** Ai Review - **Confidence:** 91.0% - **Path:** package.json - **Public source:** [View source]() The manifest makes an HTML file the package entry point. Public source snippet (untrusted): ```json "main": "index.html", "files": [ "index.html" ] ``` ### 6. High: Ai Review Evidence - **Category:** Ai Review - **Confidence:** 91.0% - **Path:** index.html - **Public source:** [View source]() The page loads a Cloudflare challenge script and then fetches a policy redirect before navigating the browser. Public source snippet (untrusted): ```text ``` ## Dependencies and install lifecycle - **Lifecycle scripts present:** No - **Dependencies:** 0 - **Optional dependencies:** 0 - **Peer dependencies:** 0 - **Development dependencies:** 0 - **Published dependency-graph edges:** 0 ## Package metadata - **Package:** afhmxiewpsf - **Ecosystem:** npm - **Version:** 1.0.4 - **Version published:** 2026-09-11T09:22:25.896Z - **Package first seen:** 2026-09-04T03:56:07.141Z - **Package last seen:** 2026-09-16T00:29:26.004Z - **Known versions:** 7 - **Latest version:** 0.0.1-security - **Appeal under review:** No ## References - [HTML security report]() - [OpenSSF/OSV advisory]() - [ADVISORY]()