registry / chai-as-relay / 1.2.1

chai-as-relay@1.2.1

This document describes the management of vulnerabilities for the project and all modules within the organization.

AI Security Review

scanned 12d ago · by lpm-firewall-ai

Importing the package main entry runs a large obfuscated script in lib/config.js. That script loads filesystem, process, child_process execSync and spawn, axios, and crypto while the rest of the strings stay encoded.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Node loads index.js through the package main entry, which requires lib/config.js at import time.

Impact

A consumer that imports the package can have arbitrary local commands and network requests run from the obfuscated payload.

Mechanism

The required file is an immediately executing obfuscated script that acquires shell execution, filesystem access, and an HTTP client.

Attack narrative

chai-as-relay 1.2.1 presents a logger-style entry, but index.js requires lib/config.js on load. That file is a multi-megabyte obfuscated script. During execution it requires os, fs, child_process execSync and spawn, axios, and crypto. No install hook is needed: importing the published main module is enough to run the hidden loader. Command strings and destinations stay encoded, so the concrete effect is untrusted code execution and outbound access from the importer process.

AI rationale

The published main module immediately runs an obfuscated payload that loads shell execution, filesystem access, and an HTTP client. That is hidden import-time attack behavior, not a logger feature.

Evidence

package.jsonindex.jslib/config.js

OSV advisory

OpenSSF/OSV

Package main index.js unconditionally requires./lib/config at module load. lib/config.js is a single-line ~4.4MB obfuscator.io-packed IIFE (hex-escaped string-array of 26,102 entries, rotated with wrapper decoders, control-flow flattening, ~133k transform changes) that self-invokes at top level. Any consumer that `require('chai-as-relay')` executes this opaque bundle in-process. The remainder of the tarball (README, LICENSE, index.d.ts, lib/proto, etc.) is copied verbatim from the legitimate `pino` logger project, and index.js additionally exports a no-op Express-style middleware — the package's advertised identity is a cover for the dropper. The package.json name (`chai-as-relay`) and author (hello@jsonspack.com) have no relationship to pino or its maintainers. A heavily obfuscated, multi-megabyte, self-executing blob wired into the require entry of a package that impersonates a top-tier logger has no legitimate purpose and gives whoever controls the payload arbitrary code execution on every installer that imports the package.

chai-as-relay@1.2.1

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code