registry / Remote code execution / beaver-ui-actions-button

beaver-ui-actions-button

React components

This report shows the evidence for beaver-ui-actions-button@5.4.9. 2 of 3 known versions are blocked or flagged. See all versions.

This package appears in our research on the August 2026 dependency confusion campaign, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

This is a concrete import-time remote-code-execution chain, not legitimate telemetry. Its obfuscated endpoints, DNS fallback, detached execution, and cleanup indicate malicious intent.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Any application code requiring the package.

Impact

Arbitrary native code executes with the importing process user's permissions.

Mechanism

obfuscated remote binary download, staging, and detached execution

Attack narrative

Requiring index.js imports setup.js. That code fetches a platform-specific payload from obfuscated worker hosts, or decodes one from DNS TXT records, writes it into a temp directory, marks it executable on Unix, and runs it detached through execFile. It suppresses errors and removes the staged file after five seconds, while presenting the behavior as telemetry.

AI rationale

This is a concrete import-time remote-code-execution chain, not legitimate telemetry. Its obfuscated endpoints, DNS fallback, detached execution, and cleanup indicate malicious intent.

Evidence

package.jsonindex.jssetup.jsREADME.md/tmp/.analytics_state/var/tmp/.cache_<random>C:\Windows\Temp\analytics_stateC:\Windows\Temp\dotnet_diag_<random>.exe

Network endpoints9

oob-worker.cf99-9b3.workers.dev/pkg/packageoob-worker.cf100-416.workers.dev/pkg/packageoob-worker.cf101-adf.workers.dev/pkg/packageoob-worker.cf102-baf.workers.dev/pkg/packageoob-worker.cf103-070.workers.dev/pkg/package

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js imports ./setup on every package import.
setup.js downloads platform-specific binary payloads over HTTPS.
setup.js falls back to DNS TXT payload retrieval.
setup.js writes, chmods, detached-executes, then deletes the payload.
Payload hosts are obfuscated by fragmented string concatenation.
README describes telemetry, not remote binary execution.

Evidence against

package.json has no lifecycle scripts.
No credential harvesting or AI-agent control-surface writes found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 4.78 KB of source

Source & flagged code

1 flagged

setup.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = beaver-ui-actions-button@5.4.7 matchedIdentity = npm:[redacted]:5.4.7 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

setup.jsView on unpkg

Source & flagged code

1 flagged · loading source

setup.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

setup.jsView on unpkg

Findings

1 High2 Medium1 Low

HighPrevious Version Dangerous Deltasetup.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

Affected versions and remediation

This report applies to beaver-ui-actions-button@5.4.9.

The versions list below shows the verdict for each recorded version.

Avoid installing beaver-ui-actions-button@5.4.9. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-01 11:33:15.466Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

5.4.9latestshownMaliciousRemote Code ExecutionBlockPublishedAug 1, 2026, 11:30 AM 5.4.8MaliciousRemote Code ExecutionBlockPublishedAug 1, 2026, 11:22 AM 5.4.7Clean—AllowPublishedAug 1, 2026, 11:15 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Source & flagged code

Related packages

Other remote code execution packages