eyevox
High-performance DOM utility and diagnostic bridge for modern web applications.
This report shows the evidence for eyevox@1.0.0. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.0-stage, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiSource inspection confirms a concrete concealed capture-and-AI-solving payload with proctoring evasion and persistence. The benign postinstall hook does not reduce the risk of the explicit runtime behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
A user runs the eyevox CLI or its start script.
Impact
Enables covert extraction and automated solving of content from other applications, including proctored exam environments.
Mechanism
Hidden watchdog, capture-exclusion evasion, foreground-window capture, and automated AI submission.
Attack narrative
Running the package's CLI detaches a hidden watchdog and starts an Electron overlay under a deceptive executable name. The application excludes its window from capture, counters Testpad detection, captures the foreground application's text or pixels, and automatically submits queued questions to ChatGPT. A bundled but unreferenced PowerShell utility can decrypt targeted browser cookies. The install hook itself is not the delivery mechanism, but the explicit runtime payload is concrete, stealthy, and designed to evade proctoring controls.
AI rationale
Source inspection confirms a concrete concealed capture-and-AI-solving payload with proctoring evasion and persistence. The benign postinstall hook does not reduce the risk of the explicit runtime behavior.
Evidence
main.jsbin/kalamasha-tool.jsbin/stealth_capture.ps1bin/uia_extract.pybin/chrome_cookies.ps1README.mdbin/uia_extract.exe%LOCALAPPDATA%\Microsoft\Windows\Diagnostics\boot.log
Network endpoints4
chatgpt.comchat.openai.comclaude.aigemini.google.com
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The claimed diagnostic utility is a concealed AI-assisted exam/proctoring evasion tool.
- Its CLI detaches a hidden watchdog that persists after terminal closure and respawns Electron.
- The application hides its window from capture and actively evades Testpad detection.
- It captures the foreground window's pixels or accessibility text and sends queued questions to ChatGPT.
- It includes a browser-cookie decryption utility targeting OpenAI-related sessions.
Evidence against
- The postinstall hook only attempts to load Electron and does not launch the payload.
- The main payload starts through the explicitly invoked CLI rather than automatically at installation.
- The bundled cookie extractor is not referenced by the JavaScript runtime path inspected.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNativeBindingsShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "try{require('electron')}catch(e){console.log('Electron will download on first run.')}"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "try{require('electron')}catch(e){console.log('Electron will download on first run.')}"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/kalamasha-tool.jsView file
2L3: const { spawn, execSync } = require('child_process');
L4: const path = require('path');
High
Child Process
Package source references child process execution.
bin/kalamasha-tool.jsView on unpkg · L2Findings
1 Critical8 High4 Medium4 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/kalamasha-tool.js
HighShellmain.js
HighCross File Remote Execution Contextbin/kalamasha-tool.js
HighRuntime Package Installbin/kalamasha-tool.js
HighKnown Malware Source Similaritymain.js
HighKnown Malware Source Similaritybin/kalamasha-tool.js
HighKnown Malware Source Fingerprint Signaturemain.js
MediumEnvironment Vars
MediumShips Native Binarybin/uia_extract.exe
MediumShips Build Helperbin/chrome_cookies.ps1
Affected versions and remediation
This report applies to eyevox@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing eyevox@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.