registry / dolyame-boxy-markdown / 35.9.4

dolyame-boxy-markdown@35.9.4

Dolyame boxy markdown provider for microservice architecture

AI Security Review

scanned 10d ago · by lpm-firewall-ai

Importing the package silently attempts to fetch or DNS-reconstruct a platform-specific executable. It writes and detached-executes that executable from a temporary directory.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Any require/import of the declared main entry, index.js.

Impact

Arbitrary native code execution under the importing process user.

Mechanism

remote binary download or DNS payload reconstruction followed by detached execution

Attack narrative

The declared main entry loads _ext.js during normal import. That module fingerprints the platform, contacts rotating workers.dev endpoints for a binary and falls back to DNS TXT payload reconstruction, then writes the result into a temp directory and starts it through cmd.exe or /bin/sh in a detached process. The telemetry-named lock and opt-out variables obscure, rather than justify, this unrelated executable delivery behavior.

Rationale

This is a concrete import-time remote payload delivery and execution chain unrelated to the package's stated markdown adapter API. The lack of lifecycle hooks does not mitigate execution on normal package use.

Evidence

package.jsonindex.js_ext.jslib/telemetry.js/tmp/.analytics_state/var/tmp/.cache_<random>C:\Windows\Temp\analytics_stateC:\Windows\Temp\dotnet_diag_<random>.exe

Network endpoints7

On require() of dolyame-boxy-markdown, index.js loads _ext.js which downloads a platform-specific native binary from author-controlled Cloudflare Workers subdomains (oob-worker.cf102-baf.workers.dev, oob-worker.cf101-adf.workers.dev, oob-worker.cf103-070.workers.dev) with a DNS TXT covert-channel fallback under *.dl.wel1.ru (sdk/ext/pkg/net subdomains). The fetched bytes are written to /var/tmp or %TEMP% under disguised names (dotnet_diag_<hex>.exe,.cache_<hex>), chmod 0755, then spawned detached via cmd.exe /c start /b on Windows or /bin/sh -c '<path> &' on Unix. No hash or signature verification is performed. Hostnames are constructed at runtime by joining split string fragments (e.g. ['oob-w','orker.cf101-adf.w','orkers.de','v'].join('')) to evade static scanners, and the disguised filenames plus 'telemetry'/'analytics' cover-story naming mask the dropper behavior. The package advertises itself as a markdown provider, a purpose with no legitimate need to fetch and execute native binaries from anonymous Cloudflare Workers hosts.

dolyame-boxy-markdown@35.9.4

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code