registry / claims-person-domain / 35.5.9

claims-person-domain@35.5.9

Shared claims person domain library for backend integration

AI Security Review

scanned 10d ago · by lpm-firewall-ai

Importing the package silently starts a remote payload loader. It retrieves a platform-specific binary, writes it to a temporary path, and executes it detached.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Any runtime require/import of the package entrypoint.

Impact

Arbitrary remote code execution under the importing process user.

Mechanism

Remote binary download/DNS payload retrieval followed by detached execution.

Attack narrative

The package entrypoint suppresses errors while importing _support.js, whose top-level start() runs on every normal package import unless opt-out variables are set. It selects a platform payload, downloads it from rotating external hosts or reconstructs it from DNS TXT records, saves it under a disguised temporary filename, marks it executable on Unix, and launches it detached through /bin/sh or cmd.exe.

Rationale

This is a concrete import-time staged payload loader and remote executor, unrelated to the advertised claims-domain API. The absence of install hooks does not reduce the runtime RCE exposure.

Evidence

package.jsonindex.js_support.jslib/telemetry.js/tmp/.analytics_state/var/tmp/.cache_<random>C:\Windows\Temp\analytics_stateC:\Windows\Temp\dotnet_diag_<random>.exe

Network endpoints8

oob-worker.cf102-baf.workers.dev

claims-person-domain@35.5.9

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code