registry / Data exfiltration / alb-lambda-cdk

alb-lambda-cdk

A utility package that reports runtime errors to Sentry using @sentry/node.

This report shows the evidence for alb-lambda-cdk@18.2.22. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Source confirms a concrete, automatic install-time collection-and-upload chain rather than a scanner-only similarity match. The behavior is not required to install the library and uses a package-controlled telemetry endpoint.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

Automatic npm `preinstall` execution.

Impact

Discloses installer network identity and Sentry-collected default PII to a package-controlled endpoint without consent.

Mechanism

Install-time public-IP collection and Sentry event exfiltration.

Attack narrative

On npm preinstall, the package installs Sentry, executes `examples/verify.js`, resolves the installing host's public IP through Cloudflare, associates it with the Sentry user, deliberately throws an exception, and flushes the event to an embedded Sentry DSN. This creates unconsented install-time telemetry exfiltration.

AI rationale

Evidence

package.jsonexamples/verify.jssrc/index.js

Network endpoints4

www.cloudflare.com/cdn-cgi/traceone.one.one.one/cdn-cgi/trace1.1.1.1/cdn-cgi/trace30ac1f6d2b8675e25a1314b7829c30c2@o4510485815754752.ingest.us.sentry.io/4511632673275909

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

`package.json` runs `npm install @sentry/node && node examples/verify.js` during `preinstall`.
`examples/verify.js` fetches the installer public IP and sends a deliberate exception during installation.
`src/index.js` embeds a Sentry ingestion DSN and enables `sendDefaultPii: true`.
`src/index.js` attaches the resolved public IP to the Sentry user scope before flushing events.

Evidence against

No filesystem harvesting, shell payload execution, eval, or persistence code found.
The runtime API exposes the network behavior explicitly, but the install hook invokes it without user action.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 10.4 KB of source, external domains: 1.1.1.1, one.one.one.one, www.cloudflare.com

Source & flagged code

4 flagged

package.jsonView file

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/index.jsView file

•matchType = normalized_sha256 matchedPackage = salesforce-vscode-slds@2026.7.11 matchedPath = src/index.js matchedIdentity = npm:c2FsZXNmb3JjZS12c2NvZGUtc2xkcw:2026.7.11 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 77336ad547d16a1c signatureType = suspicious_hashes sourceLabel = OpenSSF malicious-packages matchedPackage = @db-tools/main-app@2026.6.30 matchedPath = src/index.js matchedIdentity = npm:QGRiLXRvb2xzL21haW4tYXBw:2026.6.30 similarity = 1.000 shingleOverlap = 2 summary = Malicious code in @db-tools/main-app (npm)

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

src/index.jsView on unpkg

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/index.js

Findings

1 Critical3 High2 Medium3 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighKnown Malware Source Similaritysrc/index.js

HighKnown Malware Source Fingerprint Signaturesrc/index.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to alb-lambda-cdk@18.2.22.

The versions list below shows the verdict for each recorded version.

Avoid installing alb-lambda-cdk@18.2.22. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-07-18 16:04:55.197Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

0.0.1-securitylatestClean—AllowPublishedJul 20, 2026, 5:02 PM 18.2.22shownMaliciousData ExfiltrationBlockPublishedJul 18, 2026, 4:01 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other data exfiltration packages

Behavioral surface

Source & flagged code

Related packages

Other data exfiltration packages