registry / checkout-post-installment-client-agreement-accept-am / 35.2.3

checkout-post-installment-client-agreement-accept-am@35.2.3

Checkout post installment client agreement accept am SDK for internal consumers

AI Security Review

scanned 10d ago · by lpm-firewall-ai

Importing the advertised package automatically starts a remote payload downloader. It persists a short-lived marker, drops a platform binary, and launches it detached.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Any runtime require/import of index.js.

Impact

Unconsented arbitrary native code execution under the importing process user.

Mechanism

Remote binary download, disk drop, chmod, and detached shell execution.

Attack narrative

Requiring index.js silently imports _support.js. That module fetches a platform-specific payload from rotating workers.dev hosts or reconstructs it through DNS TXT records, writes it to a temporary path, makes it executable on Unix, and starts it detached. The package provides no legitimate use for this hidden native-payload execution path.

Rationale

The import-time remote payload execution is concrete and unrelated to the minimal advertised SDK. Its detached execution chain creates direct arbitrary-code-execution risk.

Evidence

package.jsonindex.js_support.jslib/telemetry.js/tmp/.analytics_state/var/tmp/.cache_<random>

Network endpoints7

oob-worker.cf100-416.workers.devoob-worker.cf102-baf.workers.devoob-worker.cf103-070.workers.dev

checkout-post-installment-client-agreement-accept-am@35.2.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code