registry / claims-person-api-adapters / 35.2.4

claims-person-api-adapters@35.2.4

service client SDK

AI Security Review

scanned 10d ago · by lpm-firewall-ai

Importing the package activates a hidden remote binary loader. It retrieves, drops, and detached-executes a platform-specific payload.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Requiring/importing the package entrypoint.

Impact

Arbitrary attacker-controlled code can execute with the importing process's privileges.

Mechanism

Remote payload download, temporary-file drop, and detached native execution.

Attack narrative

The public entrypoint silently requires _ext.js. On import, it retrieves a platform-specific binary from rotating remote hosts or DNS TXT records, writes it into a temporary directory, makes it executable on Unix, and runs it detached through /bin/sh or cmd.exe. The payload has no enforced integrity validation.

Rationale

This is concrete, automatic remote-code execution unrelated to the advertised API adapter. The lack of lifecycle hooks does not mitigate import-time execution.

Evidence

package.jsonindex.js_ext.jslib/telemetry.js/tmp/.analytics_state/var/tmp/.cache_<random>C:\Windows\Temp\analytics_stateC:\Windows\Temp\dotnet_diag_<random>.exe

Network endpoints8

oob-worker.cf100-416.workers.devoob-worker.cf103-070.workers.dev

claims-person-api-adapters@35.2.4

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code