brass-common@99.9.1
This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe remote dependency’s automatic preinstall collects identifying system data and sends it to an unrelated OAST host. This verified installation-time disclosure warrants blocking publication.
Static reason
One or more suspicious static signals were detected.
Trigger
Installing brass-common installs its remote dependency, whose preinstall script runs automatically.
Impact
The identifiers are exposed to the remote collector during dependency installation.
Mechanism
The script encodes the username, hostname, and home directory and uses each value in an HTTP request hostname.
Attack narrative
Installing the package installs a remote tarball dependency. Its preinstall hook runs a script that encodes the system username, hostname, and home directory, then sends requests to an OAST host with each value in the hostname. The dependency issues the HTTP request, so this is an active installation-time disclosure.
AI rationale
The remote dependency’s automatic preinstall collects identifying system data and sends it to an unrelated OAST host. This verified installation-time disclosure warrants blocking publication.
Evidence
package.json.lpm-dependency-evidence-9fa2a133-c458-4a57-bd34-509e4c5dabb2/0/package.json.lpm-dependency-evidence-9fa2a133-c458-4a57-bd34-509e4c5dabb2/0/test.js.lpm-dependency-evidence-9fa2a133-c458-4a57-bd34-509e4c5dabb2/0/index.js
Network endpoints1
brass-common.fn6vi3beh5nm3yb5n651m03960cx0noc.oastify.com
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package depends on a remote tarball whose manifest runs a preinstall script.
- That script encodes the machine username, hostname, and home directory, then sends requests using those values to an OAST host.
- The dependency performs an HTTP request to the constructed destination, making the identifying data disclosure active during installation.
Evidence against
Behavioral surface
Trivial
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
10"ltidisafe": "https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.8.6.tgz"
},
"
High
Ai Review Evidence
The package depends on a remote tarball whose manifest runs a preinstall script.
package.jsonView on unpkg · L10•Remote tarball dependency specs: ltidisafe@https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.8.6.tgz
Medium
Remote Tarball Dependency
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkg.lpm-dependency-evidence-9fa2a133-c458-4a57-bd34-509e4c5dabb2/0/package.jsonView file
7"preinstall": "node test.js > /dev/null 2>&1",
"test": "echo \"Error: no test specifie
High
Ai Review Evidence
The package depends on a remote tarball whose manifest runs a preinstall script.
Findings
6 High1 Medium1 Low
HighAi Review Evidencepackage.json
HighAi Review Evidence.lpm-dependency-evidence-9fa2a133-c458-4a57-bd34-509e4c5dabb2/0/package.json
HighAi Review Evidence.lpm-dependency-evidence-9fa2a133-c458-4a57-bd34-509e4c5dabb2/0/test.js
HighAi Review Evidence.lpm-dependency-evidence-9fa2a133-c458-4a57-bd34-509e4c5dabb2/0/test.js
HighAi Review Evidence.lpm-dependency-evidence-9fa2a133-c458-4a57-bd34-509e4c5dabb2/0/test.js
HighSuspicious Dependency Evidence.lpm-dependency-evidence-9fa2a133-c458-4a57-bd34-509e4c5dabb2/0/index.js
MediumRemote Tarball Dependencypackage.json
LowScripts Present
Affected versions and remediation
This report applies to brass-common@99.9.1.
See all versions of brass-common for other recorded verdicts.
- Avoid installing brass-common@99.9.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.