registry / Data exfiltration / fabric-native-loader
fabric-native-loader
Native asset loader bridge for Fabric mod environments
This report shows the evidence for fabric-native-loader@1.0.0, the only known version.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe package contains an automatic install hook connected to active credential harvesting and outbound transmission. This is concrete malicious data exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm postinstall executes index.js automatically.
Impact
Minecraft account credentials, token-like values, and host identity information can be disclosed to the webhook operator.
Mechanism
The script reads launcher account files, scans Minecraft files for tokens, builds a report, and posts it to the webhook.
Attack narrative
Installing the package automatically runs its entrypoint. The entrypoint gathers Minecraft launcher account tokens, searches related files for JWT and bearer tokens, adds system information, and sends the resulting report to a Discord webhook.
AI rationale
The package contains an automatic install hook connected to active credential harvesting and outbound transmission. This is concrete malicious data exfiltration.
Evidence
package.jsonindex.jslauncher_accounts.jsonlauncher_profiles.json
Network endpoints1
discord.com
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package runs index.js automatically after installation.
- The entrypoint defines a Discord webhook destination.
- It reads Minecraft launcher account records containing access and refresh tokens.
- It scans Minecraft-related files for JWT and bearer tokens.
- It sends collected report chunks through an HTTPS POST request.
- The automatic entrypoint builds the report and sends it to the webhook.
Evidence against
Behavioral surface
EnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node index.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgindex.jsView file
3const os = require("os");
L4: const https = require("https");
L5:
...
L7:
L8: const APPDATA = process.env.APPDATA || "";
L9: const LOCALAPPDATA = process.env.LOCALAPPDATA || "";
...
L15: function readJson(p) {
L16: try { return JSON.parse(fs.readFileSync(p, "utf8")); }
L17: catch { return null; }
...
L139: req.on("error", () => {});
L140: req.write(body);
L141: req.end();
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
index.jsView on unpkg · L33const os = require("os");
L4: const https = require("https");
L5:
...
L7:
L8: const APPDATA = process.env.APPDATA || "";
L9: const LOCALAPPDATA = process.env.LOCALAPPDATA || "";
...
L15: function readJson(p) {
L16: try { return JSON.parse(fs.readFileSync(p, "utf8")); }
L17: catch { return null; }
...
L139: req.on("error", () => {});
L140: req.write(body);
L141: req.end();
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
index.jsView on unpkg · L33Trigger-reachable chain: scripts.postinstall -> index.js
L3: const os = require("os");
L4: const https = require("https");
L5:
...
L7:
L8: const APPDATA = process.env.APPDATA || "";
L9: const LOCALAPPDATA = process.env.LOCALAPPDATA || "";
...
L15: function readJson(p) {
L16: try { return JSON.parse(fs.readFileSync(p, "utf8")); }
L17: catch { return null; }
...
L139: req.on("error", () => {});
L140: req.write(body);
L141: req.end();
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L33Trigger-reachable credential exfiltration chain: scripts.postinstall -> index.js
L3: const os = require("os");
L4: const https = require("https");
L5:
...
L7:
L8: const APPDATA = process.env.APPDATA || "";
L9: const LOCALAPPDATA = process.env.LOCALAPPDATA || "";
...
L15: function readJson(p) {
L16: try { return JSON.parse(fs.readFileSync(p, "utf8")); }
L17: catch { return null; }
...
L139: req.on("error", () => {});
L140: req.write(body);
L141: req.end();
High
Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
index.jsView on unpkg · L3Findings
3 Critical2 High3 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationindex.js
CriticalCredential Exfiltrationindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighInstall Time Lifecycle Scriptspackage.json
HighTrigger Reachable Credential Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to fabric-native-loader@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing fabric-native-loader@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.