registry / Credential exfiltration / babel-preset-lib-client
babel-preset-lib-client
This report shows the evidence for babel-preset-lib-client@4.9.11. 4 of 4 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThis is concrete import-time credential/environment and filesystem reconnaissance followed by unconsented external exfiltration. The absence of lifecycle hooks limits installation impact but does not remove the malicious runtime behavior.
Static reason
No blocking static signals were detected.
Trigger
Any Node.js import or require of the package main entrypoint; the declared test command also executes it.
Impact
Exposes environment variables, filesystem structure, user/host identifiers, working directory, and network addresses to an external endpoint.
Mechanism
import-time system and environment reconnaissance with webhook exfiltration
Attack narrative
The main module immediately executes when imported. It invokes `printenv`, scans `../../`, gathers host and IP information, then POSTs the collected data to a hard-coded Beeceptor endpoint. Base64 encoding obscures the environment and directory-tree content but does not prevent exfiltration.
AI rationale
This is concrete import-time credential/environment and filesystem reconnaissance followed by unconsented external exfiltration. The absence of lifecycle hooks limits installation impact but does not remove the malicious runtime behavior.
Evidence
index.jspackage.json
Network endpoints2
api.ipify.org?format=jsond3doo.free.beeceptor.com
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- `index.js` executes an async collection routine immediately on import.
- `index.js` runs `printenv` through `child_process.exec` and base64-encodes its output.
- `index.js` enumerates `../../` with `directory-tree`, base64-encodes the result, and logs it.
- `index.js` collects hostname, username, private IPs, public IP, cwd, and time.
- `index.js` POSTs the collected fields to a hard-coded Beeceptor webhook.
- `package.json` exposes `index.js` as the package main entrypoint.
Evidence against
- `package.json` contains no npm preinstall, install, or postinstall hook.
- No payload download, persistence, destructive action, or AI-agent configuration mutation was found.
Behavioral surface
ChildProcessEnvironmentVarsNetwork
UrlStrings
Source & flagged code
1 flagged · loading sourcepackage.jsonView file
•Published source reference
High
Ai Review Evidence
`package.json` exposes `index.js` as the package main entrypoint.
package.jsonView on unpkgFindings
6 High2 Medium2 Low
HighAi Review Evidence
HighAi Review Evidence
HighAi Review Evidence
HighAi Review Evidence
HighAi Review Evidence
HighAi Review Evidencepackage.json
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowUrl Strings
Affected versions and remediation
This report applies to babel-preset-lib-client@4.9.11.
The versions list below shows the verdict for each recorded version.
- Avoid installing babel-preset-lib-client@4.9.11. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.