registry / Data exfiltration / f0-form-manipulator
f0-form-manipulator
Dependency confusion proof of concept package
This report shows the evidence for f0-form-manipulator@28.0.0, the only known version.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource directly confirms unconsented install-time collection and external transmission of local system data. This is concrete malicious exfiltration, not a benign package feature.
Static reason
One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
npm preinstall
Impact
Leaks host identity, home-directory path, and configured DNS resolvers to a third party.
Mechanism
install-time host fingerprinting and HTTPS exfiltration
Attack narrative
On npm installation, the preinstall hook runs index.js without a user command. The script gathers local host fingerprint data and POSTs it to an external OAST domain; the bundled tarball duplicates this behavior.
AI rationale
Source directly confirms unconsented install-time collection and external transmission of local system data. This is concrete malicious exfiltration, not a benign package feature.
Evidence
package.jsonindex.jsf0-form-manipulator-28.0.0.tgz
Network endpoints1
v62io3r4g3itdnqjg9h9pnh2mtslge43.oastify.com
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json runs `node index.js` in preinstall.
- index.js collects hostname, platform, architecture, home directory, and DNS servers.
- index.js POSTs the collected host data to an external OAST endpoint.
- Nested archive contains the same preinstall manifest and exfiltration code.
Evidence against
- No credential-file harvesting, shell execution, or payload download was found.
Behavioral surface
Network
HighEntropyStrings
NoLicense
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node index.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgindex.jsView file
1const https = require("https");
L2: const os = require("os");
L3: const dns = require("dns");
L4:
L5: const data = JSON.stringify({
L6: hostname: os.hostname(),
L7: platform: os.platform(),
...
L26:
L27: req.write(data);
L28: req.end();
High
Host Fingerprint Exfiltration
Source collects local host identity data and sends it to an external endpoint.
index.jsView on unpkg · L1•matchType = malicious_source_fingerprint_signature
signature = 55ef5c661ef1e2d6
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = f0-fpti-tracking-manager@28.0.0
matchedPath = index.js
matchedIdentity = npm:[redacted]:28.0.0
similarity = 1.000
shingleOverlap = 1
summary = package final verdict is malicious
High
Findings
3 High3 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHost Fingerprint Exfiltrationindex.js
HighKnown Malware Source Fingerprint Signatureindex.js
MediumNetwork
MediumShips Compressed Blobf0-form-manipulator-28.0.0.tgz
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowNested Archive Needs Inspectionf0-form-manipulator-28.0.0.tgz
LowNo License
Affected versions and remediation
This report applies to f0-form-manipulator@28.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing f0-form-manipulator@28.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.