registry / Data exfiltration / chat-adapter-zoom
chat-adapter-zoom
A utility package that reports runtime errors to Sentry using @sentry/node.
This report shows the evidence for chat-adapter-zoom@12.1.31. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
AI Security Review
scanned 4mo ago · by lpm-firewall-aiSource inspection confirms concrete install-time execution that sends telemetry to a hardcoded Sentry DSN and queries public IP endpoints before the user imports the package. This is not merely a dual-use monitoring library because the behavior is automatically triggered by preinstall.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
npm preinstall lifecycle during package installation
Impact
Installer environment metadata, public egress IP, and error event/context can be sent to a package-controlled Sentry project during install.
Mechanism
unconsented install-time Sentry telemetry and public-IP collection
Attack narrative
On installation, npm runs the package preinstall script. That script installs @sentry/node and executes examples/verify.js, which initializes the exported module with its hardcoded default Sentry DSN, fetches public IP information via Cloudflare trace, deliberately throws/captures an error, and flushes the event to Sentry. This creates unconsented install-time network telemetry to infrastructure controlled by the package author.
AI rationale
Source inspection confirms concrete install-time execution that sends telemetry to a hardcoded Sentry DSN and queries public IP endpoints before the user imports the package. This is not merely a dual-use monitoring library because the behavior is automatically triggered by preinstall.
Evidence
package.jsonexamples/verify.jssrc/index.jssrc/index.d.ts
Network endpoints4
ab3ba49fb61df1dca0cc496846baee89@o4510485815754752.ingest.us.sentry.io/4511709729914880www.cloudflare.com/cdn-cgi/traceone.one.one.one/cdn-cgi/trace1.1.1.1/cdn-cgi/trace
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json defines preinstall: npm install @sentry/node && node examples/verify.js
- examples/verify.js runs during preinstall and calls ecCheck.init() with package default DSN
- src/index.js hardcodes Sentry DSN https://ab3ba49fb61df1dca0cc496846baee89@o4510485815754752.ingest.us.sentry.io/4511709729914880
- src/index.js init enables sendDefaultPii:true and uploads captured errors via @sentry/node
- examples/verify.js calls setUserFromPublicIp using Cloudflare trace, then captures a forced TypeError and flushes to Sentry
- preinstall performs unconsented install-time network activity and telemetry upload unrelated to installing the package
Evidence against
- No child_process, eval/vm, dynamic require, native binary loading, destructive filesystem writes, or AI-agent control-surface writes found
- Network code is visible in source rather than obfuscated
- Runtime API is mostly a Sentry wrapper, but the same behavior is invoked automatically at install time
Behavioral surface
ChildProcessEnvironmentVars
Source & flagged code
4 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = npm install @sentry/node && node examples/verify.js
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.preinstall = npm install @sentry/node && node examples/verify.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgsrc/index.jsView file
•matchType = normalized_sha256
matchedPackage = enbd-react-error-boundry@6.0.0
matchedPath = src/index.js
matchedIdentity = npm:[redacted]:6.0.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/index.jsFindings
1 Critical3 High2 Medium3 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similaritysrc/index.js
HighKnown Malware Source Fingerprint Signaturesrc/index.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to chat-adapter-zoom@12.1.31.
The versions list below shows the verdict for each recorded version.
- Avoid installing chat-adapter-zoom@12.1.31. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.