registry / Remote code execution / fastify-bundler

fastify-bundler

This is a high-performance web framework for Node.js, offering the fastest speeds in the ecosystem with minimal overhead.

This report shows the evidence for fastify-bundler@1.4.16. 4 of 5 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

This is a concrete remote-code-execution loader, not a normal resource fetcher. Lack of an install hook limits activation to runtime, but does not remove the malicious execution chain.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

A consumer imports the package and calls getPlugin().

Impact

Remote code execution in the consuming Node process.

Mechanism

remote payload fetch followed by Function-constructor execution

Attack narrative

The exported getPlugin function requests a payload from the hard-coded 31.97.137.157 server, parses JSON, and executes data.credits through new Function. The payload receives require, process, globalThis, Buffer, and timer APIs, enabling arbitrary code execution with the permissions of the application that invokes it.

AI rationale

This is a concrete remote-code-execution loader, not a normal resource fetcher. Lack of an install hook limits activation to runtime, but does not remove the malicious execution chain.

Evidence

index.jspackage.jsonREADME.md

Network endpoints1

31.97.137.157:45000/icons/105

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js getPlugin fetches a fixed IP endpoint.
index.js passes server JSON field data.credits to new Function.
Evaluated code receives require, process, global, Buffer, and timers.
README/package names and documented API do not match exports.

Evidence against

package.json has no lifecycle scripts.
Remote fetch/evaluation occurs only when exported getPlugin is called.
No local credential harvesting or file writes are present in package source.

Behavioral surface

Source

EvalNetwork

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 5.96 KB of source

Source & flagged code

2 flagged

index.jsView file

149// Note: The code uses async/await, so we need to handle that L150: const evalFn = new Function( L151: 'require', 'module', 'exports', '__dirname', '__filename', 'console', 'process', 'global', 'Buffer', 'setTimeout', 'setInterval', 'clearTimeout', 'clearInterval', 'Promise',

High

Eval

Package source references dynamic code evaluation.

index.jsView on unpkg · L149

•matchType = malicious_source_fingerprint_signature signature = e4520ff13983a406 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = fastify-bundler@1.4.14 matchedPath = index.js matchedIdentity = npm:ZmFzdGlmeS1idW5kbGVy:1.4.14 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

Source & flagged code

2 flagged · loading source

index.jsView file

High

Eval

Package source references dynamic code evaluation.

index.jsView on unpkg · L149

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

Findings

2 High1 Medium1 Low

HighEvalindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

MediumNetwork

LowScripts Present

Affected versions and remediation

This report applies to fastify-bundler@1.4.16.

The versions list below shows the verdict for each recorded version.

Avoid installing fastify-bundler@1.4.16. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-24 09:00:55.854Z (UTC).

Source advisory published: 2026-07-14 02:41:15.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

5 known versions

0.0.1-securitylatestClean—AllowPublishedJul 22, 2026, 4:15 PM 1.4.16shownMaliciousRemote Code ExecutionBlockPublishedJul 22, 2026, 2:52 PM 1.4.15MaliciousRemote Code ExecutionBlockPublishedJul 21, 2026, 6:36 AM 1.4.14MaliciousRemote Code ExecutionBlockPublishedJul 21, 2026, 4:31 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Source & flagged code

Related packages

Other remote code execution packages