registry / Malware / depcruise-wrap-stream-in-html

depcruise-wrap-stream-in-html

This report shows the evidence for depcruise-wrap-stream-in-html@99.9.1. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.

OpenSSF/OSV Malicious Advisory

imported 2mo ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-14068 confirms this npm version as malicious.

Advisory

MAL-2026-14068

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in depcruise-wrap-stream-in-html (npm)

Details

depcruise-wrap-stream-in-html@99.9.1 is a hollow package: index.js is `module.exports = {}` and the name mimics an internal helper of dependency-cruiser. Its only effect on install is resolving a runtime dependency `ltidisafe` from an arbitrary HTTPS tarball URL — `https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.5.tgz` — hosted on a Google Cloud Storage bucket unrelated to any known publisher of dependency-cruiser. On `npm install`, npm downloads and installs that tarball into node_modules, and any lifecycle scripts inside it execute on the installer's machine. The bucket owner can swap the tarball contents at any time without republishing to npm, bypassing registry scanning and version pinning guarantees. The 99.9.1 version number and lookalike name are consistent with a dependency-confusion / smuggling lure.

References

OpenSSF/OSV advisory PACKAGE

Independent LPM AI assessment

Suspicious

Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.

The remote tarball dependency is a concrete staged-payload delivery surface, while the inspected package has no direct malicious behavior. Warn rather than block because no payload code or lifecycle execution is present in the package source.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install of depcruise-wrap-stream-in-html

Impact

The remotely controlled dependency archive could introduce install-time or runtime code outside the inspected package source.

Mechanism

remote tarball dependency fetch

AI rationale

Evidence

package.jsonindex.js

Network endpoints1

ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.5.tgz

Independent scan evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for AI warning decision

Manifest pins `ltidisafe` to a remote Google Cloud Storage tarball rather than a registry version.

Evidence against

Package has no preinstall/install/postinstall scripts.
Runtime entrypoint only exports an empty object.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 35 B of source

Source & flagged code

2 flagged

package.jsonView file

9"dependencies": { "ltidisafe": "https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.5.tgz" }

High

Ai Review Evidence

Manifest pins `ltidisafe` to a remote Google Cloud Storage tarball rather than a registry version.

package.jsonView on unpkg · L9

•Remote tarball dependency specs: ltidisafe@https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.5.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Source & flagged code

2 flagged · loading source

package.jsonView file

9"dependencies": { "ltidisafe": "https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.5.tgz" }

High

Ai Review Evidence

Manifest pins `ltidisafe` to a remote Google Cloud Storage tarball rather than a registry version.

package.jsonView on unpkg · L9

•Remote tarball dependency specs: ltidisafe@https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.5.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

1 High1 Medium1 Low

HighAi Review Evidencepackage.json

MediumRemote Tarball Dependencypackage.json

LowScripts Present

Affected versions and remediation

This report applies to depcruise-wrap-stream-in-html@99.9.1.

The versions list below shows the verdict for each recorded version.

Avoid installing depcruise-wrap-stream-in-html@99.9.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-16 09:28:29.322Z (UTC).

Source advisory published: 2026-08-15 18:11:29.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

0.0.1-securitylatestClean—AllowPublishedAug 18, 2026, 4:18 PM 99.9.1shownMaliciousMalwareBlockPublishedAug 15, 2026, 2:32 PM

OpenSSF/OSV Malicious Advisory

Independent LPM AI assessment

Independent scan evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Related packages

Other malware packages

Source & flagged code