registry / commerce-materials / 1.0.0

commerce-materials@1.0.0

SECURITY RESEARCH - Dependency Confusion PoC - Contact: ajmalaboobacker00@gmail.com

AI Security Review

scanned 17d ago · by lpm-firewall-ai

Install hooks automatically run reconnaissance and transmit it to external endpoints. This is a concrete install-time data-exfiltration surface.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm preinstall or postinstall.

Impact

An installer exposes identifying system and project reconnaissance to an external operator without a user action.

Mechanism

callback.js collects host, user, directory, CI/cloud, network, environment-name, and file-presence metadata, then sends it by HTTPS and DNS.

Attack narrative

Installing the package invokes callback.js before and after installation. The script inventories potentially sensitive environment-variable names, checks for configuration and credential-related files, and gathers machine, user, working-directory, home-directory, CI, cloud, and network metadata. It sends the resulting message to Telegram, suppressing errors, and attempts a DNS callback as a backup channel.

AI rationale

Automatic lifecycle execution performs unsolicited host and project reconnaissance and transmits it externally. The package's research claim does not remove this concrete install-time exfiltration behavior.

Evidence

package.jsoncallback.js.env.npmrc.git/config.docker/config.jsoncredentialssecrets.json

Network endpoints2

api.telegram.orgdc-callback.example.com

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-16330

Source

OpenSSF Malicious Packages via OSV

Summary

References

OSV advisory

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The manifest automatically runs callback.js during both preinstall and postinstall.
The callback inventories environment-variable names matching credential-related patterns.
The callback identifies sensitive project and configuration files and assembles host, user, home-directory, CI, cloud, and network metadata.
It sends the assembled message to Telegram and also performs a DNS callback containing encoded host information.

Evidence against

The code appears to collect environment-variable names rather than their values, but it still exports substantial host and project reconnaissance automatically.

Behavioral surface

Source

EnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 6.69 KB of source

Source & flagged code

10 flagged

package.jsonView file

•scripts.postinstall = node callback.js 2>/dev/null || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node callback.js 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node callback.js 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

callback.jsView file

4*/ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

callback.jsView on unpkg · L4

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

callback.jsView on unpkg · L4

Critical

Dns Exfiltration

Source appears to send environment or credential material through DNS lookups.

callback.jsView on unpkg · L4

4Trigger-reachable chain: scripts.preinstall -> callback.js L4: */ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

callback.jsView on unpkg · L4

4Trigger-reachable credential exfiltration chain: scripts.preinstall -> callback.js L4: */ L5: const https = require('https'); L6: const os = require('os'); L7: const dns = require('dns'); L8: const fs = require('fs'); ... L12: const CHAT_ID = '1064260758'; L13: const PKG_NAME = process.env.npm[redacted] || 'unknown'; L14: ... L17: const indicators = { L18: 'GitHub Actions': process.env.GITHUB_ACTIONS, L19: 'GitLab CI': process.env.GITLAB_CI, ... L62: /auth/i, /api/i, /aws/i, /azure/i, /gcp/i, /google/i,

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

callback.jsView on unpkg · L4

•matchType = normalized_sha256 matchedPackage = byted-commerce-materials@1.0.0 matchedPath = callback.js matchedIdentity = npm:[redacted]:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

callback.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 5069e151b9cf5006 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = byted-commerce-materials@1.0.0 matchedPath = callback.js matchedIdentity = npm:[redacted]:1.0.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

callback.jsView on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node callback.js 2>/dev/null || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node callback.js 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node callback.js 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

callback.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

callback.jsView on unpkg · L4

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

callback.jsView on unpkg · L4

Critical

Dns Exfiltration

Source appears to send environment or credential material through DNS lookups.

callback.jsView on unpkg · L4

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

callback.jsView on unpkg · L4

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

callback.jsView on unpkg · L4

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

callback.jsView on unpkg

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

callback.jsView on unpkg

Findings

4 Critical4 High5 Medium3 Low

CriticalHardcoded Runtime Data Exfiltrationcallback.js

CriticalCredential Exfiltrationcallback.js

CriticalDns Exfiltrationcallback.js

CriticalTrigger Reachable Dangerous Capabilitycallback.js

HighInstall Time Lifecycle Scriptspackage.json

HighTrigger Reachable Credential Exfiltrationcallback.js

HighKnown Malware Source Similaritycallback.js

HighKnown Malware Source Fingerprint Signaturecallback.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to commerce-materials@1.0.0.

See version security history for other recorded verdicts.

Avoid installing commerce-materials@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-22 00:02:39.816Z (UTC).

99%Malicious

AI assessment confidence

IntentMalware

TypeInstall Hook Abuse

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched malicious

Trusted malware advisory MAL-2026-16330 identifies this version as malicious. Firewall keeps the version blocked under its trusted-intelligence policy. An AI recommendation to allow or warn does not override that advisory.

Package metadata

npm

AuthorSecurity Researcher

Version1.0.0

PublishedSep 20, 2026

LicenseMIT

Dependencies0

Integrityverified

Package size3.19 KB

Files3

Keywordssecurityresearchdependency-confusion

Runtime surface

package.json

Entrypointsmain → index.js

RuntimeNo engine / OS / CPU constraints

Artifact7.14 KB · 3 files1 signature(s)

Install lifecyclepostinstallpreinstall

Behavioral surface

EnvironmentVarsFilesystemNetworkHighEntropyStringsManifest: clean