registry / dilema / 1.0.2

dilema@1.0.2

System-wide AI overlay. Hidden from screen sharing.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Running `dilema start` installs deceptive Windows persistence and launches a detached overlay daemon. The daemon identifies assessment/test windows, injects a bundled DLL into their processes, captures content, and sends it to Groq.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Explicit user execution of `dilema start` on Windows.

Impact

Can bypass target application protections and disclose captured assessment or screen content to an external service.

Mechanism

Disguised scheduled-task persistence, remote DLL injection, protected-window capture, and screenshot exfiltration.

Attack narrative

After a user runs `dilema start`, the CLI disguises Electron as an Edge component, creates a minute-by-minute scheduled relaunch task, and starts a detached guard/daemon. The daemon searches for assessment-related windows, injects the bundled `unprotect.dll` into matching processes through PowerShell remote-thread injection, then captures screen/window content. It sends screenshot-derived content and window context to `api.groq.com` for OCR and answers.

Rationale

Source inspection confirms a concrete stealth, persistence, process-injection, protected-content-capture, and external-transmission chain. Although it lacks install hooks, the explicit command activates malicious behavior.

Evidence

package.jsondist/cli/index.jscli/guard.cjsdesktop/dist/daemon.cjsdesktop/resources/find_testpad.ps1desktop/resources/inject_dll.ps1desktop/resources/unprotect.dll

Network endpoints

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

`dist/cli/index.js` copies Electron as `msedgewebview2.exe` and rewrites its version metadata to impersonate Microsoft Edge.
`dist/cli/index.js` creates a `MicrosoftEdgeWebView2Update` scheduled task every minute to relaunch a detached guard.
`desktop/dist/daemon.cjs` repeatedly calls `ensureTestpadUnprotected()` after startup.
`desktop/resources/inject_dll.ps1` opens another process with full access, writes a DLL path, and starts a remote `LoadLibraryW` thread.
`desktop/dist/daemon.cjs` posts captured screenshot image data and window context to `api.groq.com`.
`desktop/resources/find_testpad.ps1` targets windows matching test, exam, assessment, and named education-platform terms.

Evidence against

`package.json` contains no `preinstall`, `install`, or `postinstall` hook.
The behavior is activated by the explicit `dilema start` command rather than package installation.
The only confirmed outbound runtime host is the declared AI-service endpoint `api.groq.com`.

Behavioral surface

Source

ChildProcessCrypto

Source & flagged code

9 flagged

dist/cli/index.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {

3 get: (a, b) => (typeof require !== "undefined" ? require : a)[b]

4}) : x)(function(x) {

5 if (typeof require !== "undefined") return require.apply(this, arguments);

6 throw Error('Dynamic require of "' + x + '" is not supported');

7});

9// cli/index.ts

10import { existsSync as existsSync3, mkdirSync as mkdirSync2, writeFileSync as writeFileSync2, copyFileSync } from "fs";

11import { dirname, join as join2, resolve as resolve2 } from "path";

12import { homedir as homedir2 } from "os";

13import { fileURLToPath } from "url";

14import { spawn, execSync } from "child_process";

15import { createRequire } from "module";

High

Child Process

Package source references child process execution.

dist/cli/index.jsView on unpkg · L13

16import chalk from "chalk";

17import { Command } from "commander";

18import dotenv from "dotenv";

20// shared/storage.ts

21import Conf from "conf";

23// shared/crypto.ts

24import { createCipheriv, createDecipheriv, createHash, randomBytes } from "crypto";

25var ALGO = "aes-256-gcm";

26function machineScopedSecret() {

27 const basis = `${process.platform}|${process.arch}|${process.env.USERNAME ?? process.env.USER ?? "user"}`;

28 return createHash("sha256").update(basis).digest();

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/index.jsView on unpkg · L13

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli/index.jsView on unpkg · L13

29}

30function poolSecret() {

31 const parts = [112, 97, 103, 101, 97, 105, 45, 112, 111, 111, 108, 45, 118, 50];

32 return createHash("sha256").update(Buffer.from(parts)).digest();

33}

desktop/dist/daemon.cjsView file

Lines 2925-2965javascript

2925 validateName,

2926 ValidationError: _ValidationError,

2927 schema: sch.schema,

2928 schemaEnv: sch,

2929 rootId,

2930 baseId: sch.baseId || rootId,

2931 schemaPath

desktop/resources/unprotect.dllView file

•path = desktop/resources/unprotect.dll kind = native_binary sizeBytes = 14336 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

desktop/resources/unprotect.dllView on unpkg

desktop/resources/inject_dll.ps1View file

•path = desktop/resources/inject_dll.ps1 kind = build_helper sizeBytes = 2304 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

desktop/resources/inject_dll.ps1View on unpkg

dist/shared/index.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = dilema@1.0.1 matchedIdentity = npm:ZGlsZW1h:1.0.1 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/shared/index.cjsView on unpkg

Source & flagged code

9 flagged · loading source

dist/cli/index.jsView file

13import { fileURLToPath } from "url"; L14: import { spawn, execSync } from "child_process"; L15: import { createRequire } from "module";

High

Child Process

Package source references child process execution.

dist/cli/index.jsView on unpkg · L13

13Cross-file remote execution chain: dist/cli/index.js spawns desktop/dist/daemon.cjs; helper contains network access plus dynamic code execution. L13: import { fileURLToPath } from "url"; L14: import { spawn, execSync } from "child_process"; L15: import { createRequire } from "module"; ... L23: // shared/crypto.ts L24: import { createCipheriv, createDecipheriv, createHash, randomBytes } from "crypto"; L25: var ALGO = "aes-256-gcm"; L26: function machineScopedSecret() { L27: const basis = `${process.platform}|${process.arch}|${process.env.USERNAME ?? process.env.USER ?? "user"}`; L28: return createHash("sha256").update(basis).digest(); ... L118: const seeds = []; L119: if (typeof __dirname !== "undefined") { L120: seeds.push(__dirname);

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/index.jsView on unpkg · L13

13import { fileURLToPath } from "url"; L14: import { spawn, execSync } from "child_process"; L15: import { createRequire } from "module"; ... L23: // shared/crypto.ts L24: import { createCipheriv, createDecipheriv, createHash, randomBytes } from "crypto"; L25: var ALGO = "aes-256-gcm"; L26: function machineScopedSecret() { L27: const basis = `${process.platform}|${process.arch}|${process.env.USERNAME ?? process.env.USER ?? "user"}`; L28: return createHash("sha256").update(basis).digest(); ... L118: const seeds = []; L119: if (typeof __dirname !== "undefined") { L120: seeds.push(__dirname);

Findings

2 Critical3 High6 Medium5 Low

CriticalEncrypted Payload Temp Executiondesktop/dist/daemon.cjs

CriticalPrevious Version Dangerous Deltadist/shared/index.cjs

HighChild Processdist/cli/index.js

HighShelldesktop/dist/daemon.cjs

HighCross File Remote Execution Contextdist/cli/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli/index.js

MediumShips Native Binarydesktop/resources/unprotect.dll

MediumShips Build Helperdesktop/resources/inject_dll.ps1

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldesktop/dist/daemon.cjs