Loading npm security reports…

byted-commerce-materials@1.0.0: Malicious npm security report | LPM Firewall

registry / byted-commerce-materials / 1.0.0

byted-commerce-materials@1.0.0

SECURITY RESEARCH - Dependency Confusion PoC - Contact: ajmalaboobacker00@gmail.com

AI Security Review

scanned 17d ago · by lpm-firewall-ai

Install lifecycle hooks execute a host-fingerprinting callback without user action. The callback transmits collected installation-context data to Telegram and uses DNS as a backup channel.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation invokes the preinstall or postinstall lifecycle hook.

Impact

An installer’s host and deployment context is disclosed to an unrelated operator during package installation.

Mechanism

callback.js gathers system, CI, cloud, network, environment-name, and file-presence metadata, posts it to a hard-coded Telegram bot, and issues an encoded DNS lookup.

Attack narrative

Installing the package automatically launches callback.js before and after installation. It fingerprints the machine and deployment environment, checks for sensitive configuration filenames, then silently posts a formatted report to a Telegram bot. If HTTPS is blocked, it sends selected host, user, and CI data through a DNS query. The declared research purpose does not establish consent for this automatic external reporting.

AI rationale

Automatic install-time host reconnaissance and covert transmission to hard-coded external endpoints are concrete malicious behavior. Error suppression and a DNS fallback reinforce the intent to collect installation telemetry without consent.

Evidence

package.jsoncallback.js

Network endpoints2

api.telegram.orgdc-callback.example.com

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node callback.js 2>/dev/null || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node callback.js 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node callback.js 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

callback.jsView file

4*/ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

callback.jsView on unpkg · L4

4*/ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

callback.jsView on unpkg · L4

4*/ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

Critical

Dns Exfiltration

Source appears to send environment or credential material through DNS lookups.

callback.jsView on unpkg · L4

4Trigger-reachable chain: scripts.preinstall -> callback.js L4: */ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

callback.jsView on unpkg · L4

4Trigger-reachable credential exfiltration chain: scripts.preinstall -> callback.js L4: */ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

callback.jsView on unpkg · L4

•matchType = normalized_sha256 matchedPackage = commerce-materials@1.0.0 matchedPath = callback.js matchedIdentity = npm:Y29tbWVyY2UtbWF0ZXJpYWxz:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

callback.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 5069e151b9cf5006 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = commerce-materials@1.0.0 matchedPath = callback.js matchedIdentity = npm:Y29tbWVyY2UtbWF0ZXJpYWxz:1.0.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

callback.jsView on unpkg

Source & flagged code

10 flagged

package.jsonView file

•scripts.postinstall = node callback.js 2>/dev/null || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node callback.js 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node callback.js 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

callback.jsView file

4*/ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

callback.jsView on unpkg · L4

4*/ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

callback.jsView on unpkg · L4

4*/ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

Critical

Dns Exfiltration

Source appears to send environment or credential material through DNS lookups.

callback.jsView on unpkg · L4

4Trigger-reachable chain: scripts.preinstall -> callback.js L4: */ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

callback.jsView on unpkg · L4

4Trigger-reachable credential exfiltration chain: scripts.preinstall -> callback.js L4: */ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

callback.jsView on unpkg · L4

•matchType = normalized_sha256 matchedPackage = commerce-materials@1.0.0 matchedPath = callback.js matchedIdentity = npm:Y29tbWVyY2UtbWF0ZXJpYWxz:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

callback.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 5069e151b9cf5006 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = commerce-materials@1.0.0 matchedPath = callback.js matchedIdentity = npm:Y29tbWVyY2UtbWF0ZXJpYWxz:1.0.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

callback.jsView on unpkg