dccxx-s3-explorer@1.0.162-hoaphat: Install hook abuse – flagged

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

No concrete malicious chain was found, but the prepare lifecycle can mutate Git-hook state and merits a warning under the lifecycle policy. Scanner credential and cloud-metadata hits are attributable to bundled authentication dependencies.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Dependency lifecycle execution; separately, user interaction with the rendered S3 explorer UI.

Impact

Potential repository hook setup; user-authorized cloud-file sync and website crawling through the local backend.

Mechanism

Husky prepare hook plus user-invoked cloud sync/crawl client requests.

AI rationale

No concrete malicious chain was found, but the prepare lifecycle can mutate Git-hook state and merits a warning under the lifecycle policy. Scanner credential and cloud-metadata hits are attributable to bundled authentication dependencies.

Evidence

package.jsondist/s3-explorer.jsdist/s3-explorer.umd.cjs

Network endpoints3

localhost:3000login.microsoftonline.com/consumersapis.google.com/js/api.js

Decision evidence

public snapshot

AI called this Suspicious at 85.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

package.json: prepare runs husky.
dist/s3-explorer.js: runtime component stores OAuth tokens in localStorage and submits user-selected cloud files to its API.
dist/s3-explorer.js: user-entered URLs can be sent to /api/crawl.

Evidence against

No preinstall/install/postinstall hook in package.json.
prepare is a standard Husky command; no package script directly edits agent configuration or runs shell payloads.
Bundle API base URL is http://localhost:3000, not a hidden remote collector.
OAuth, upload, sync, crawl, and delete actions are exposed through explicit UI interactions.
169.254.169.254 and credential strings are bundled MSAL dependency code, not package-owned credential harvesting.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

6 flagged

dist/s3-explorer.umd.cjsView file

1(function(ro,c){typeof exports=="object"&&typeof module<"u"?c(exports,require("react/jsx-runtime"),require("react"),require("react-dom")):typeof define=="function"&&define.amd?defi... L2: Error: ${i.errorCode} ... L4: Error: ${a.name} L5: Error Description: ${a.message}`)}return null}return r||(this.logger.warning("The developer's authority was not found within the CloudInstanceDiscoveryMetadata returned from the ne... L6: ${a}`);return}else if(n&&e.status&&e.status>=cs.CLIENT_ERROR_RANGE_START&&e.status<=cs.CLIENT_ERROR_RANGE_END){this.logger.warning(`executeTokenRequest:validateTokenResponse - AAD ... L7: ${a}`);return}throw JC(e.error,e.error_description,e.suberror)?new Co(e.error,e.error_description,e.suberror,e.timestamp||ye.EMPTY_STRING,e.trace_id||ye.EMPTY_STRING,e.correlation_.

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/s3-explorer.umd.cjsView on unpkg · L1

1Trigger-reachable chain: manifest.main -> dist/s3-explorer.umd.cjs L1: (function(ro,c){typeof exports=="object"&&typeof module<"u"?c(exports,require("react/jsx-runtime"),require("react"),require("react-dom")):typeof define=="function"&&define.amd?defi... L2: Error: ${i.errorCode} ... L4: Error: ${a.name} L5: Error Description: ${a.message}`)}return null}return r||(this.logger.warning("The developer's authority was not found within the CloudInstanceDiscoveryMetadata returned from the ne... L6: ${a}`);return}else if(n&&e.status&&e.status>=cs.CLIENT_ERROR_RANGE_START&&e.status<=cs.CLIENT_ERROR_RANGE_END){this.logger.warning(`executeTokenRequest:validateTokenResponse - AAD ... L7: ${a}`);return}throw JC(e.error,e.error_description,e.suberror)?new Co(e.error,e.error_description,e.suberror,e.tim

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/s3-explorer.umd.cjsView on unpkg · L1

1096patternName = google_api_key severity = high line = 1096 matchedText = In order...full

High

High Secret

Package contains a high-severity secret pattern.

dist/s3-explorer.umd.cjsView on unpkg · L1096

1(function(ro,c){typeof exports=="object"&&typeof module<"u"?c(exports,require("react/jsx-runtime"),require("react"),require("react-dom")):typeof define=="function"&&define.amd?defi... L2: Error: ${i.errorCode} ... L4: Error: ${a.name} L5: Error Description: ${a.message}`)}return null}return r||(this.logger.warning("The developer's authority was not found within the CloudInstanceDiscoveryMetadata returned from the ne... L6: ${a}`);return}else if(n&&e.status&&e.status>=cs.CLIENT_ERROR_RANGE_START&&e.status<=cs.CLIENT_ERROR_RANGE_END){this.logger.warning(`executeTokenRequest:validateTokenResponse - AAD ... L7: ${a}`);return}throw JC(e.error,e.error_description,e.suberror)?new Co(e.error,e.error_description,e.suberror,e.timestamp||ye.EMPTY_STRING,e.trace_id||ye.EMPTY_STRING,e.correlation_.

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/s3-explorer.umd.cjsView on unpkg · L1

1096patternName = google_api_key severity = high line = 1096 matchedText = In order...full

High

Secret Pattern

Google API key in dist/s3-explorer.umd.cjs

dist/s3-explorer.umd.cjsView on unpkg · L1096

dist/s3-explorer.jsView file

34520patternName = google_api_key severity = high line = 34520 matchedText = }, kG = ...1 };

High

Secret Pattern

Google API key in dist/s3-explorer.js

dist/s3-explorer.jsView on unpkg · L34520

Source & flagged code

6 flagged · loading source

dist/s3-explorer.umd.cjsView file

1(function(ro,c){typeof exports=="object"&&typeof module<"u"?c(exports,require("react/jsx-runtime"),require("react"),require("react-dom")):typeof define=="function"&&define.amd?defi... L2: Error: ${i.errorCode} ... L4: Error: ${a.name} L5: Error Description: ${a.message}`)}return null}return r||(this.logger.warning("The developer's authority was not found within the CloudInstanceDiscoveryMetadata returned from the ne... L6: ${a}`);return}else if(n&&e.status&&e.status>=cs.CLIENT_ERROR_RANGE_START&&e.status<=cs.CLIENT_ERROR_RANGE_END){this.logger.warning(`executeTokenRequest:validateTokenResponse - AAD ... L7: ${a}`);return}throw JC(e.error,e.error_description,e.suberror)?new Co(e.error,e.error_description,e.suberror,e.timestamp||ye.EMPTY_STRING,e.trace_id||ye.EMPTY_STRING,e.correlation_.

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/s3-explorer.umd.cjsView on unpkg · L1

1Trigger-reachable chain: manifest.main -> dist/s3-explorer.umd.cjs L1: (function(ro,c){typeof exports=="object"&&typeof module<"u"?c(exports,require("react/jsx-runtime"),require("react"),require("react-dom")):typeof define=="function"&&define.amd?defi... L2: Error: ${i.errorCode} ... L4: Error: ${a.name} L5: Error Description: ${a.message}`)}return null}return r||(this.logger.warning("The developer's authority was not found within the CloudInstanceDiscoveryMetadata returned from the ne... L6: ${a}`);return}else if(n&&e.status&&e.status>=cs.CLIENT_ERROR_RANGE_START&&e.status<=cs.CLIENT_ERROR_RANGE_END){this.logger.warning(`executeTokenRequest:validateTokenResponse - AAD ... L7: ${a}`);return}throw JC(e.error,e.error_description,e.suberror)?new Co(e.error,e.error_description,e.suberror,e.tim

Findings

2 Critical4 High3 Medium4 Low

CriticalBrowser Credential Phishingdist/s3-explorer.umd.cjs

CriticalTrigger Reachable Dangerous Capabilitydist/s3-explorer.umd.cjs

HighHigh Secretdist/s3-explorer.umd.cjs

HighCloud Metadata Accessdist/s3-explorer.umd.cjs

HighSecret Patterndist/s3-explorer.umd.cjs

HighSecret Patterndist/s3-explorer.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

dccxx-s3-explorer@1.0.162-hoaphat

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code