registry / Remote code execution / eduyaoi
eduyaoi
eduyaoi
This report shows the evidence for eduyaoi@1.1.0, the only known version.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe package is a browser remote-code loader: index.html dynamically imports fetched bytes and calls boot, and sw.js importScripts a versioned CDN script. Obfuscated CDN endpoints and an embedded signing key show publisher-controlled remote execution rather than a local library.
Static reason
One or more suspicious static signals were detected.
Trigger
A browser loads index.html or registers sw.js; nothing runs from an npm lifecycle hook.
Impact
Whoever controls the signed remote release can execute new script in the page and service worker without changing the npm package.
Mechanism
The page fetches pointer bytes, builds a blob URL, dynamically imports it, and invokes boot with a service-worker URL. The worker replaces a version placeholder from the page query string and importScripts the first CDN script that loads.
Attack narrative
eduyaoi publishes an obfuscated HTML loader as its entry. When that page is opened it fetches a remote pointer, dynamically imports the downloaded bytes, and calls the module boot function with a service-worker URL. The bundled worker reads a version from the page address and importScripts a matching script from hidden CDN bases, including jsDelivr, unpkg, and esm.sh. Install does not start this, but any site or user that loads the package files runs publisher-controlled remote code that can change without a new npm release.
AI rationale
The package is a browser remote-code loader: index.html dynamically imports fetched bytes and calls boot, and sw.js importScripts a versioned CDN script. Obfuscated CDN endpoints and an embedded signing key show publisher-controlled remote execution rather than a local library.
Evidence
index.htmlsw.js
Network endpoints4
cdn.jsdelivr.netunpkg.comesm.shfonts.googleapis.com
Decision evidence
public snapshotAI called this Malicious at 86.0% confidence as Malware with low false-positive risk.
Evidence for block
- The published entry is index.html, and the tarball also ships sw.js, with no install lifecycle scripts.
- index.html turns fetched bytes into a blob URL and dynamically imports that module.
- The imported module must export boot, which the page calls and passes a service-worker URL.
- On load the page fetches a remote pointer with an embedded public key and fetch.
- sw.js holds obfuscated CDN bases and calls importScripts after substituting a version taken from the page URL.
Evidence against
- package.json has no preinstall, install, or postinstall, so npm install does not run this code.
- The loader checks a signed descriptor with an embedded key before calling boot.
- The only plaintext network URL is a Google Fonts stylesheet.
Behavioral surface
DynamicRequireNetwork
HighEntropyStringsMinifiedPossibleObfuscationTrivial
Source & flagged code
8 flagged · loading sourceindex.htmlView file
1return await import(_0x171419);}finally{URL[_0x27e382(_0x50af30._0x478c99,0x2c)](_0x171419);}}function te(_0x103512){const _0x5bc4cb={_0x302ca4:0x363,_0x624132:0x425};function _0x4
High
Ai Review Evidence
index.html turns fetched bytes into a blob URL and dynamically imports that module.
index.htmlView on unpkg · L11let {boot:_0x145873}=_0xc00f6a;if(typeof _0x145873!=_0x179657(-0x2c,_0x34d2b3._0xae0895))throw new Error(_0x179657(-_0x34d2b3._0x1a2e3b,-_0x34d2b3._0x28c87d));i
High
Ai Review Evidence
The imported module must export boot, which the page calls and passes a service-worker URL.
index.htmlView on unpkg · L11await _0x145873({...Se,..._0x3f17b8,'swUrl':_0x179657(-0x41,-0x33)+encodeURIComponent(_0x19eea5[_0x179657(-_0x34d2b3._0x3781b1,-_0x34d2b3._0x418f22)])
High
Ai Review Evidence
The imported module must export boot, which the page calls and passes a service-worker URL.
index.htmlView on unpkg · L11await J({'publicKeySpki':re,'pointerUrls':w?[w+_0x26de01(0x3b1,0x471)]:void 0x0,'fetchImpl':w?(_0x45ff40,_0x1cb0b9)=>fetch(String(_0x45ff40)[_0x26de01(0x3e9,0x3c4)](_0x26de01(0x3fd
Findings
7 High3 Medium1 Low
HighSuspicious Lifecycle Evidencepackage.json
HighAi Review Evidenceindex.html
HighAi Review Evidenceindex.html
HighAi Review Evidenceindex.html
HighAi Review Evidenceindex.html
HighAi Review Evidencesw.js
HighAi Review Evidencesw.js
MediumDynamic Requireindex.html
MediumNetwork
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
Affected versions and remediation
This report applies to eduyaoi@1.1.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing eduyaoi@1.1.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.