registry / Remote code execution / babel-polyfill-plugin-corejs2

babel-polyfill-plugin-corejs2

babel-polyfill-plugin-corejs2 supports the usage-pure, usage-global, and entry-global methods. When entry-global is used, it replaces imports to core-js.

This report shows the evidence for babel-polyfill-plugin-corejs2@1.0.1. 1 of 3 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The distributed main entrypoint contains an obfuscated, import-triggered remote payload loader unrelated to the package’s stated functionality. Absence of lifecycle hooks does not mitigate runtime remote code execution.

Static reason

No blocking static signals were detected.

Trigger

Runtime import or require of babel-polyfill-plugin-corejs2.

Impact

Unconsented remote code execution in the importing process.

Mechanism

import-time obfuscated remote payload loader using axios and dynamic Function

Attack narrative

The manifest resolves imports to lib/index.js, whose normal-looking subscription implementation is followed by an obfuscated Function expression invoked immediately. Its loader requires axios, awaits an obfuscated request, uses returned data to construct a dynamic function, and invokes it with require. This creates an import-time remote-code-execution chain; the source counterpart does not contain the appended payload.

AI rationale

Evidence

package.jsonlib/index.jssrc/index.js

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json loads lib/index.js as its main entrypoint.
lib/index.js appends a large obfuscated Function payload after otherwise normal subscription code.
The payload immediately invokes its async loader during module import.
The loader obtains axios, performs an obfuscated remote request, then constructs and invokes code from the response.

Evidence against

package.json contains no npm lifecycle hook.

Behavioral surface

Source

Eval

Supply chain

MinifiedPossibleObfuscation

Manifest

CopyleftLicense

scanned 5 file(s), 134 KB of source

Source & flagged code

4 flagged

lib/index.jsView file

57Function("ObbvO95","var mSIXOjg,WVViAFk,L4TSiDB,P8yTwB,AgaxPy,IkYkkji,DW_UX6d,zdoRhv,ETHBay;

High

Ai Review Evidence

lib/index.js appends a large obfuscated Function payload after otherwise normal subscription code.

lib/index.jsView on unpkg · L57

57function Hsgl8bn(){Hsgl8bn=function(){}}return uJDV85();")({get"OQ5L7ik"(){return window},get"C2goZ9T"(){return require},get"PFgRCq"(){return module}});

High

Ai Review Evidence

The payload immediately invokes its async loader during module import.

lib/index.jsView on unpkg · L57

56}; L57: }; Function("ObbvO95","var ... L58:

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/index.jsView on unpkg · L56

package.jsonView file

15"main": "lib/index.js",

High

Ai Review Evidence

package.json loads lib/index.js as its main entrypoint.

package.jsonView on unpkg · L15

Source & flagged code

4 flagged · loading source

lib/index.jsView file

57Function("ObbvO95","var mSIXOjg,WVViAFk,L4TSiDB,P8yTwB,AgaxPy,IkYkkji,DW_UX6d,zdoRhv,ETHBay;

High

Ai Review Evidence

lib/index.js appends a large obfuscated Function payload after otherwise normal subscription code.

lib/index.jsView on unpkg · L57

57function Hsgl8bn(){Hsgl8bn=function(){}}return uJDV85();")({get"OQ5L7ik"(){return window},get"C2goZ9T"(){return require},get"PFgRCq"(){return module}});

High

Ai Review Evidence

The payload immediately invokes its async loader during module import.

lib/index.jsView on unpkg · L57

56}; L57: }; Function("ObbvO95","var ... L58:

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/index.jsView on unpkg · L56

package.json

Findings

3 High3 Low

HighAi Review Evidencepackage.json

HighAi Review Evidencelib/index.js

LowScripts Present

LowEvallib/index.js

LowCopyleft License

Affected versions and remediation

This report applies to babel-polyfill-plugin-corejs2@1.0.1.

The versions list below shows the verdict for each recorded version.

Avoid installing babel-polyfill-plugin-corejs2@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-14 22:30:05.253Z (UTC).

Source advisory published: 2026-08-24 16:45:38.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

0.0.1-securitylatestUnknown—AllowUnder ReviewOct 14, 2026, 10:22 PM 0.0.0-stageClean—AllowPublishedOct 14, 2026, 10:20 PM 1.0.1shownMaliciousRemote Code ExecutionBlockPublishedAug 24, 2026, 7:26 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Source & flagged code

Related packages

Other remote code execution packages