registry / Data exfiltration / colorpicker-ui
colorpicker-ui
Minimal color picker component for React with HSL and hex support
This report shows the evidence for colorpicker-ui@1.2.6. 3 of 3 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiDirect inspection confirms a concrete automatic reconnaissance-and-exfiltration chain, not merely suspicious primitives. The benign UI entrypoint does not justify the install-time behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
npm install
Impact
Exposure of cloud credentials, Kubernetes token material, host topology, and privileged environment details.
Mechanism
postinstall host/cloud reconnaissance and webhook exfiltration
Attack narrative
On npm install, package.json launches setup.js. The script immediately collects host and sandbox data, attempts Kubernetes and cloud-metadata credential collection, scans local and nearby network ports, gathers process, filesystem, and privilege information, and POSTs serialized results to a fixed webhook.site endpoint. This behavior is unrelated to the advertised color-picker component and is unconsented install-time data exfiltration.
AI rationale
Direct inspection confirms a concrete automatic reconnaissance-and-exfiltration chain, not merely suspicious primitives. The benign UI entrypoint does not justify the install-time behavior.
Evidence
package.jsonsetup.jsindex.jsREADME.md
Network endpoints4
webhook.site/3dc365ff-07dd-42e6-b5e7-e707736401fb169.254.169.254/latest/meta-data/metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https://management.azure.com/
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- postinstall runs setup.js automatically.
- setup.js executes host commands and reads Kubernetes token paths.
- It requests AWS, GCP, and Azure metadata credentials.
- It scans localhost, gateway, and subnet ports.
- It POSTs collected reconnaissance to a fixed webhook.
- recon() runs immediately when setup.js loads.
Evidence against
- index.js is a minimal React color-picker implementation.
- No package-local persistence or file-write behavior was found.
Behavioral surface
ChildProcessFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node setup.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg6"scripts": {
"postinstall": "node setup.js"
}
High
setup.jsView file
1const { execSync } = require("child_process");
L2: const fs = require("fs");
High
1const { execSync } = require("child_process");
L2: const fs = require("fs");
L3: const os = require("os");
L4: const https = require("https");
L5: const http = require("http");
...
L12: return execSync(cmd, { timeout, encoding: "utf8", stdio: ["pipe","pipe","pipe"] }).trim();
L13: } catch(e) { return e.stdout ? e.stdout.trim() : ""; }
L14: }
...
L51: data.host = {
L52: hostname: os.hostname(),
L53: platform: os.platform(),
...
L86: // AWS IMDSv1
Findings
6 High2 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processsetup.js
HighCommand Output Exfiltrationsetup.js
HighCloud Metadata Accesssetup.js
HighTrigger Reachable External Post Callbacksetup.js
HighSuspicious Lifecycle Evidencepackage.json
MediumNetwork
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to colorpicker-ui@1.2.6.
The versions list below shows the verdict for each recorded version.
- Avoid installing colorpicker-ui@1.2.6. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.