calcurender@1.0.0
A lightweight utility for managing calculator UI instances and rendering optimizations.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe entry point automatically decodes and executes a command embedded in the package manifest. The command downloads a batch file from an unrelated IP address and launches it, which is malicious remote code execution.
Static reason
No blocking static signals were detected.
Trigger
Importing the package entry point or running its start script.
Impact
Runs remotely supplied code on the user's machine.
Mechanism
The entry point decodes a command stored in package.json and passes it to child_process.exec after a short random delay. The command downloads and launches a batch file.
Attack narrative
When main.js loads, it decodes the shipped integrity field with a hard-coded key and executes the resulting shell command after a random delay. That command downloads baseball.bat from an unrelated IP address and launches it with cmd, allowing the remote batch file to run on the user's machine.
AI rationale
The entry point automatically decodes and executes a command embedded in the package manifest. The command downloads a batch file from an unrelated IP address and launches it, which is malicious remote code execution.
Evidence
package.jsonmain.jsconfig.jsonbaseball.bat
Network endpoints1
65.109.171.171/baseball.bat
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package declares main.js as its entry point and a start script that runs it.
- main.js runs main() at module load, so the command path is reached on import or when the start script runs.
- main.js XOR-decodes the package.json integrity value using the configured key; decoding the shipped value yields a command that downloads http://65.109.171.171/baseball.bat and launches it with cmd.
- The decoded command is passed to child_process.exec after a randomized delay of up to five seconds.
- On startup, main.js may also write a generated integrity value into package.json.
Evidence against
- The manifest declares no npm lifecycle hooks.
- The package has no declared dependencies. Its calculator utility description does not explain the decoded download-and-execute behavior.
Behavioral surface
ChildProcessCryptoFilesystemShell
Source & flagged code
7 flaggedpackage.jsonView file
1{
"name": "calcurender",
"version": "1.0.0",
"description": "A lightweight utility for managing calculator UI instances and rendering optimizations.",
"main": "main.js",
"scripts": {
"start": "node main.js"
},
"keywords": [
"calculator",
"ui",
"utils",
"renderer"
],
"author": "Jane Williams",
"license": "ISC",
"integrity": "[redacted]"
}
High
Ai Review Evidence
The package declares main.js as its entry point and a start script that runs it.
package.jsonView on unpkg · L11{
"name": "calcurender",
"version": "1.0.0",
"description": "A lightweight utility for managing calculator UI instances and rendering optimizations.",
"main": "main.js",
"scripts": {
"start": "node main.js"
},
"keywords": [
"calculator",
"ui",
"utils",
"renderer"
],
"author": "Jane Williams",
"license": "ISC",
"integrity": "[redacted]"
}
High
Ai Review Evidence
main.js XOR-decodes the package.json integrity value using the configured key; decoding the shipped value yields a command that downloads http://65.109.171.171/baseball.bat and launches it with cmd.
package.jsonView on unpkg · L1main.jsView file
Findings
7 High2 Low
HighAi Review Evidencepackage.json
HighAi Review Evidencemain.js
HighAi Review Evidencemain.js
HighAi Review Evidenceconfig.json
HighAi Review Evidencepackage.json
HighAi Review Evidencemain.js
HighAi Review Evidencemain.js
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to calcurender@1.0.0.
See all versions of calcurender for other recorded verdicts.
- Avoid installing calcurender@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.