registry / Malware / dilema

dilema

System-wide AI overlay. Hidden from screen sharing.

This report shows the evidence for dilema@1.0.4. 3 of 5 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Source inspection confirms deliberate third-party protected-process targeting, DLL injection, masquerading, and persistence. The lack of install-time execution does not negate the concrete malicious runtime behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Explicit user execution of `dilema start`; daemon startup thereafter

Impact

Bypasses third-party protected-window controls and persists a concealed process to facilitate unauthorized capture and AI-assisted answers.

Mechanism

Exam-targeted DLL injection, process masquerading, scheduled-task persistence, and screenshot upload

Attack narrative

The CLI starts a disguised Electron daemon, watchdog, and Windows scheduled task named as an Edge update. At runtime the daemon searches for TestPad, exam, and assessment windows with display protections, then invokes a PowerShell remote-thread injector to load the bundled DLL into their processes. It additionally captures screens and sends their content to Groq to extract and solve questions. This is a concrete evasion and persistence chain, not merely a benign overlay implementation.

AI rationale

Evidence

package.jsondist/cli/index.jscli/guard.cjsdesktop/dist/daemon.cjsdesktop/resources/find_testpad.ps1desktop/resources/inject_dll.ps1desktop/resources/unprotect.dll%APPDATA%/Dilemma/launch.json%APPDATA%/Dilemma/resurrect.js

Network endpoints1

api.groq.com/openai/v1/chat/completions

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

`desktop/dist/daemon.cjs` finds TestPad/exam windows and injects `unprotect.dll` every 5 seconds.
`desktop/resources/inject_dll.ps1` uses remote-thread DLL injection into another process.
`dist/cli/index.js` disguises Electron as Microsoft Edge WebView2 and changes its version metadata.
`dist/cli/index.js` creates a minute-by-minute `MicrosoftEdgeWebView2Update` scheduled task to resurrect the daemon.
`cli/guard.cjs` restarts the daemon and masquerades its process title as Windows Audio Device Graph Isolation.
`desktop/dist/daemon.cjs` captures screen content and sends it to Groq for OCR/exam answers.

Evidence against

`package.json` has no preinstall, install, postinstall, or prepare lifecycle hook.
The observed network destination is the package-aligned Groq API rather than an unknown collector.
Persistence is activated by the explicit `dilema start` command, not on npm installation.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystem

Source & flagged code

12 flagged

dist/cli/index.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {

3 get: (a, b) => (typeof require !== "undefined" ? require : a)[b]

4}) : x)(function(x) {

5 if (typeof require !== "undefined") return require.apply(this, arguments);

6 throw Error('Dynamic require of "' + x + '" is not supported');

7});

9// cli/index.ts

10import { existsSync as existsSync3, mkdirSync as mkdirSync2, writeFileSync as writeFileSync2, copyFileSync } from "fs";

11import { dirname, join as join2, resolve as resolve2 } from "path";

12import { homedir as homedir2 } from "os";

13import { fileURLToPath } from "url";

14import { spawn, execSync } from "child_process";

15import { createRequire } from "module";

High

Child Process

Package source references child process execution.

dist/cli/index.jsView on unpkg · L13

16import chalk from "chalk";

17import { Command } from "commander";

18import dotenv from "dotenv";

20// shared/storage.ts

21import Conf from "conf";

23// shared/crypto.ts

24import { createCipheriv, createDecipheriv, createHash, randomBytes } from "crypto";

25var ALGO = "aes-256-gcm";

26function machineScopedSecret() {

27 const basis = `${process.platform}|${process.arch}|${process.env.USERNAME ?? process.env.USER ?? "user"}`;

28 return createHash("sha256").update(basis).digest();

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/index.jsView on unpkg · L13

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli/index.jsView on unpkg · L13

29}

30function poolSecret() {

31 const parts = [112, 97, 103, 101, 97, 105, 45, 112, 111, 111, 108, 45, 118, 50];

32 return createHash("sha256").update(Buffer.from(parts)).digest();

33}

•matchType = normalized_sha256 matchedPackage = dilema@1.0.3 matchedPath = dist/cli/index.js matchedIdentity = npm:ZGlsZW1h:1.0.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/index.jsView on unpkg

desktop/dist/daemon.cjsView file

Lines 2925-2965javascript

2925 validateName,

2926 ValidationError: _ValidationError,

2927 schema: sch.schema,

2928 schemaEnv: sch,

2929 rootId,

2930 baseId: sch.baseId || rootId,

2931 schemaPath

desktop/resources/unprotect.dllView file

•path = desktop/resources/unprotect.dll kind = native_binary sizeBytes = 14336 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

desktop/resources/unprotect.dllView on unpkg

desktop/resources/inject_dll.ps1View file

•path = desktop/resources/inject_dll.ps1 kind = build_helper sizeBytes = 2304 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

desktop/resources/inject_dll.ps1View on unpkg

cli/guard.cjsView file

•matchType = normalized_sha256 matchedPackage = dilema@1.0.3 matchedPath = cli/guard.cjs matchedIdentity = npm:ZGlsZW1h:1.0.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/guard.cjsView on unpkg

dist/shared/index.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = dilema@1.0.1 matchedIdentity = npm:ZGlsZW1h:1.0.1 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/shared/index.cjsView on unpkg

Source & flagged code

12 flagged · loading source

dist/cli/index.jsView file

13import { fileURLToPath } from "url"; L14: import { spawn, execSync } from "child_process"; L15: import { createRequire } from "module";

High

Child Process

Package source references child process execution.

dist/cli/index.jsView on unpkg · L13

13Cross-file remote execution chain: dist/cli/index.js spawns desktop/dist/daemon.cjs; helper contains network access plus dynamic code execution. L13: import { fileURLToPath } from "url"; L14: import { spawn, execSync } from "child_process"; L15: import { createRequire } from "module"; ... L23: // shared/crypto.ts L24: import { createCipheriv, createDecipheriv, createHash, randomBytes } from "crypto"; L25: var ALGO = "aes-256-gcm"; L26: function machineScopedSecret() { L27: const basis = `${process.platform}|${process.arch}|${process.env.USERNAME ?? process.env.USER ?? "user"}`; L28: return createHash("sha256").update(basis).digest(); ... L118: const seeds = []; L119: if (typeof __dirname !== "undefined") { L120: seeds.push(__dirname);

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/index.jsView on unpkg · L13

Findings

2 Critical6 High6 Medium5 Low

CriticalEncrypted Payload Temp Executiondesktop/dist/daemon.cjs

CriticalPrevious Version Dangerous Deltadist/shared/index.cjs

HighChild Processdist/cli/index.js

HighShelldesktop/dist/daemon.cjs

HighCross File Remote Execution Contextdist/cli/index.js

HighKnown Malware Source Similaritycli/guard.cjs

HighKnown Malware Source Similaritydist/cli/index.js

HighKnown Malware Source Similaritydesktop/dist/daemon.cjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli/index.js

MediumShips Native Binarydesktop/resources/unprotect.dll

Affected versions and remediation

This report applies to dilema@1.0.4.

The versions list below shows the verdict for each recorded version.

Avoid installing dilema@1.0.4. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-07-18 18:28:15.414Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

5 known versions

1.0.4latestshownMaliciousMalwareBlockPublishedJul 18, 2026, 6:25 PM 1.0.3MaliciousPersistenceBlockPublishedJul 18, 2026, 6:12 PM 1.0.2MaliciousData ExfiltrationBlockPublishedJul 18, 2026, 4:46 PM 1.0.1SuspiciousPersistenceWarnPublishedJul 5, 2026, 5:31 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Behavioral surface

Related packages

Other malware packages

Source & flagged code