calculator-preinstall-chain-demo@1.1.1
Test fixture: depends on NPM1 to demonstrate a transitive preinstall hook
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe root package installs a dependency whose preinstall hook contacts an embedded external webhook without installer consent. Although the request contains only a fixed message, the automatic unrelated install-time contact is malicious install-hook abuse.
Static reason
No blocking static signals were detected.
Trigger
Installing the root package with dependency scripts enabled triggers the dependency’s preinstall hook.
Impact
Installation contacts an unrelated external webhook without installer consent; the inspected request does not include host or user data.
Mechanism
The hook sends a fixed notification by POST to the webhook and writes a local status marker.
Attack narrative
On installation, npm runs the transitive dependency’s preinstall hook. It posts a fixed test message to an embedded Discord webhook without installer consent, then records the result in a local marker file. The inspected request does not transmit host or user data.
AI rationale
The root package installs a dependency whose preinstall hook contacts an embedded external webhook without installer consent. Although the request contains only a fixed message, the automatic unrelated install-time contact is malicious install-hook abuse.
Evidence
package.json.lpm-dependency-evidence-81439576-fbd0-4838-8bce-5b24e9934a2a/0/npm-linux/package.json.lpm-dependency-evidence-81439576-fbd0-4838-8bce-5b24e9934a2a/0/npm-linux/preinstall.js.lpm-dependency-evidence-81439576-fbd0-4838-8bce-5b24e9934a2a/0/npm-linux/.preinstall-marker.json
Network endpoints1
discord.com/api/webhooks/1566215853794394162/xsqpEbSn-cc3DU2AKWdzqWnXX5hjTfV-gUePQZ4evrHGlZctMd40TKCrN42qnJd7moc1
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The root package installs calculator-preinstall-hook-demo@1.1.1.
- That dependency runs preinstall.js as an npm preinstall hook.
- The hook posts to an embedded Discord webhook during installation.
- The POST body is a fixed test notification, unrelated to the package’s calculator purpose.
Evidence against
- The inspected request contains no hostname, username, project details, environment values, or file contents.
- The hook writes a local status marker; the root package has no lifecycle script of its own.
Behavioral surface
Trivial
NoLicense
Source & flagged code
5 flaggedpackage.jsonView file
•dependencies.calculator-preinstall-hook-demo = 1.1.1
previous = 1.1.0
independentlyConfirmedMalicious = calculator-preinstall-hook-demo@1.1.1 (lpm_ai_confirmed)
Critical
Known Malicious Dependency Insertion
A newly added or changed runtime dependency can resolve to an independently confirmed malicious package version.
package.jsonView on unpkg7"dependencies": {
"calculator-preinstall-hook-demo": "1.1.1"
},
"license": "UNLICENSED"
}
High
Ai Review Evidence
The root package installs calculator-preinstall-hook-demo@1.1.1.
package.jsonView on unpkg · L7.lpm-dependency-evidence-81439576-fbd0-4838-8bce-5b24e9934a2a/0/npm-linux/package.jsonView file
7"engines": { "node": ">=18" },
"scripts": {
"preinstall": "node preinstall.js"
},
"license": "U
Findings
1 Critical4 High1 Low
CriticalKnown Malicious Dependency Insertionpackage.json
HighAi Review Evidencepackage.json
HighSuspicious Lifecycle Evidence.lpm-dependency-evidence-81439576-fbd0-4838-8bce-5b24e9934a2a/0/npm-linux/package.json
HighAi Review Evidence.lpm-dependency-evidence-81439576-fbd0-4838-8bce-5b24e9934a2a/0/npm-linux/preinstall.js
HighAi Review Evidence.lpm-dependency-evidence-81439576-fbd0-4838-8bce-5b24e9934a2a/0/npm-linux/preinstall.js
LowNo License
Affected versions and remediation
This report applies to calculator-preinstall-chain-demo@1.1.1.
See all versions of calculator-preinstall-chain-demo for other recorded verdicts.
- Avoid installing calculator-preinstall-chain-demo@1.1.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.