bmcat
High-performance DOM utility and diagnostic bridge for modern web applications.
This report shows the evidence for bmcat@2.0.9, the only known version.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiSource inspection confirms a concrete stealth, persistence, capture, and AI-assisted cheating workflow. Its credential-handling code and bundled credential material compound the risk, so publication should be blocked.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Running the bmcat command activates the detached launcher and Electron application; screen edges and global hotkeys activate capture and submission.
Impact
Enables concealed exam or assessment cheating, persistent user-space execution, and exposure or misuse of AI session credentials.
Mechanism
Stealth proctoring evasion, foreground capture, and AI-session automation.
Attack narrative
A user who runs the package starts a detached launcher that copies Electron under a plausible Windows process name and respawns it. The application makes a hidden overlay resistant to screenshots and proctor interference, captures the active window through UI automation or GDI, and sends captured questions to logged-in AI services. It also ships code to decrypt browser cookies and code to inject AI session tokens. This is a concealed cheating and credential-misuse tool, not the DOM diagnostic utility claimed in its metadata.
AI rationale
Source inspection confirms a concrete stealth, persistence, capture, and AI-assisted cheating workflow. Its credential-handling code and bundled credential material compound the risk, so publication should be blocked.
Evidence
package.jsonbin/kalamasha-tool.jsmain.jsbin/stealth_capture.ps1bin/uia_extract.pybin/chrome_cookies.ps1profile-picker.htmlconfig.jsonbin/uia_extract.exe%LOCALAPPDATA%\Microsoft\Windows\Diagnostics\boot.log%LOCALAPPDATA%\Microsoft\Windows\Diagnostics\.kill_watchdog
Network endpoints5
chatgpt.com/?model=autochat.openai.comclaude.aigemini.google.com/appipc.shadxino.internal/login_post
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The command launcher creates a detached watchdog, disguises an Electron copy as SearchApp.exe, and respawns it after termination.
- The main process hides its overlay from capture and repeatedly counters Testpad/proctor windows.
- Runtime hotkeys and screen-edge actions capture foreground text or images, then submit them to AI services.
- The package includes a browser-cookie decryption utility for OpenAI-related domains and code that injects session tokens into AI-service cookies.
- The bundled configuration contains credential material; it should not have been published.
Evidence against
- The postinstall hook only attempts to require Electron and does not launch the application.
- The inspected source does not show the cookie extractor being invoked by the application.
- No separate attacker-controlled exfiltration host was identified; the observed external destinations are AI services selected by the package.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNativeBindings
Source & flagged code
10 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "try{require('electron')}catch(e){console.log('Electron will download on first run.')}"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "try{require('electron')}catch(e){console.log('Electron will download on first run.')}"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/kalamasha-tool.jsView file
2L3: const { spawn, execSync } = require('child_process');
L4: const path = require('path');
High
Child Process
Package source references child process execution.
bin/kalamasha-tool.jsView on unpkg · L2Findings
1 Critical7 High4 Medium4 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/kalamasha-tool.js
HighShellmain.js
HighCross File Remote Execution Contextbin/kalamasha-tool.js
HighRuntime Package Installbin/kalamasha-tool.js
HighKnown Malware Source Similaritymain.js
HighKnown Malware Source Similaritybin/kalamasha-tool.js
MediumEnvironment Vars
MediumShips Native Binarybin/uia_extract.exe
MediumShips Build Helperbin/chrome_cookies.ps1
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to bmcat@2.0.9.
The versions list below shows the verdict for each recorded version.
- Avoid installing bmcat@2.0.9. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.