cacao1@9.9.9: Malicious npm security report (Block)

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Installing the package automatically executes code before and after installation. That code transmits the machine hostname to an external endpoint.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation, including dependency installation, triggers preinstall and postinstall.

Impact

It leaks an installation-environment identifier without a user action and can track affected hosts.

Mechanism

Install-time hostname exfiltration over HTTPS.

Attack narrative

The package configures npm preinstall and postinstall hooks to run index.js. The script obtains the host name and includes it in a request to a Pipedream-controlled URL. This occurs automatically during installation. A self-dependency on cacao1 also creates unnecessary lifecycle supply-chain risk.

Rationale

Source inspection confirms unconsented install-time transmission of the host name to an external collection endpoint. The automatic hooks and self-dependency increase the supply-chain risk.

Evidence

package.jsonindex.js

Network endpoints1

eo8f3m3ho26a0nm.m.pipedream.net

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

Both preinstall and postinstall automatically run index.js during npm installation.
The lifecycle code sends the installing machine's hostname to an external Pipedream endpoint.
The package declares a runtime dependency on its own package name and compatible release range.

Evidence against

The inspected source does not show file reads, credential harvesting, or destructive writes.
The source is short and does not contain an additional downloaded payload or shell execution.

Behavioral surface

Source

Filesystem

Supply chain

TrivialUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 207 B of source, external domains: eo8f3m3ho26a0nm.m.pipedream.net

Source & flagged code

4 flagged

package.jsonView file

•scripts.postinstall = node index.js --save-prod

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node index.js --save-prod

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node index.js --save-prod

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

index.jsView file

•matchType = malicious_source_fingerprint_signature signature = ab380c01ab85e2a4 signatureType = suspicious_hashes sourceLabel = Datadog matchedPackage = buildkite-pipelines@9.9.9 matchedPath = index.js matchedIdentity = npm:YnVpbGRraXRlLXBpcGVsaW5lcw:9.9.9 similarity = 1.000 shingleOverlap = 1 summary = Datadog malicious npm corpus sample: samples/npm/malicious_intent/buildkite-pipelines/9.9.9/2025-09-24-buildkite-pipelines-v9.9.9.zip

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node index.js --save-prod

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node index.js --save-prod

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node index.js --save-prod

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

index.jsView file

•matchType = malicious_source_fingerprint_signature signature = ab380c01ab85e2a4 signatureType = suspicious_hashes sourceLabel = Datadog matchedPackage = buildkite-pipelines@9.9.9 matchedPath = index.js matchedIdentity = npm:YnVpbGRraXRlLXBpcGVsaW5lcw:9.9.9 similarity = 1.000 shingleOverlap = 1 summary = Datadog malicious npm corpus sample: samples/npm/malicious_intent/buildkite-pipelines/9.9.9/2025-09-24-buildkite-pipelines-v9.9.9.zip

Findings

2 High2 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighKnown Malware Source Fingerprint Signatureindex.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

LowFilesystem

LowUrl Strings