fca-nx@1.4.0: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

fca-nx@1.4.0: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

8 flagged · loading source

checkUpdate.jsView file

1const axios = require('axios'); L2: const { execSync } = require('child_process'); L3: const fs = require('fs');

High

Child Process

Package source references child process execution.

checkUpdate.jsView on unpkg · L1

65try { L66: execSync(`npm install ${CONFIG.pkgName}@${version} --save`, { L67: cwd: process.cwd(),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

checkUpdate.jsView on unpkg · L65

•matchType = normalized_sha256 matchedPackage = fca-nx@1.1.0 matchedPath = checkUpdate.js matchedIdentity = npm:ZmNhLW54:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

checkUpdate.jsView on unpkg

e2eebot.jsView file

12L13: const fs = require('fs'); L14: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

e2eebot.jsView on unpkg · L12

19async function importESM(specifier) { L20: const dynamicImport = new Function('specifier', 'return import(specifier)'); L21: return dynamicImport(specifier);

Low

Eval

Package source references a known benign dynamic code generation pattern.

e2eebot.jsView on unpkg · L19

build/messagix.soView file

•path = build/messagix.so kind = native_binary sizeBytes = 17504872 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

build/messagix.soView on unpkg

index.jsView file

•matchType = token_shingles matchedPackage = fca-nx@1.1.0 matchedPath = index.js matchedIdentity = npm:ZmNhLW54:1.1.0 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

src/getAccess.jsView file

•matchType = normalized_sha256 matchedPackage = fca-nx@1.1.0 matchedPath = src/getAccess.js matchedIdentity = npm:ZmNhLW54:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/getAccess.jsView on unpkg

Source & flagged code

8 flagged

checkUpdate.jsView file

Lines 1-21javascript

1const axios = require('axios');

2const { execSync } = require('child_process');

3const fs = require('fs');

High

Child Process

Package source references child process execution.

checkUpdate.jsView on unpkg · L1

4const path = require('path');

5

6const CONFIG = {

7 pkgName: 'nx-fca',

8 silent: true

9};

10

11function getCurrentVersion() {

12 try {

13 const ownPkg = path.join(__dirname, 'package.json');

14 if (fs.existsSync(ownPkg)) {

15 const pkg = JSON.parse(fs.readFileSync(ownPkg, 'utf-8'));

16 if (pkg.name === CONFIG.pkgName && pkg.version) {

17 return pkg.version;

18 }

19 }

20 } catch (_) {}

21

Lines 45-85javascript

45 try {

46 const { data: npmData } = await axios.get(`https://registry.npmjs.org/${CONFIG.pkgName}/latest`);

47

48 const latestVersion =

•matchType = normalized_sha256 matchedPackage = fca-nx@1.1.0 matchedPath = checkUpdate.js matchedIdentity = npm:ZmNhLW54:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

checkUpdate.jsView on unpkg

e2eebot.jsView file

Lines 1-39javascript

1#!/usr/bin/env node

2"use strict";

3

4/**

5 * ═══════════════════════════════════════════════════════════════════════════════

6 * E2EE Test Bot - @mostakim-fca/v2 E2EE System (NEW - Proper Implementation)

7 * ═══════════════════════════════════════════════════════════════════════════════

8 *

9 * Uses the new Client class from lib/index.mjs directly

10 * Properly initializes E2EE with device data and memory management

11 */

build/messagix.soView file

•path = build/messagix.so kind = native_binary sizeBytes = 17504872 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

build/messagix.soView on unpkg

index.jsView file

•matchType = token_shingles matchedPackage = fca-nx@1.1.0 matchedPath = index.js matchedIdentity = npm:ZmNhLW54:1.1.0 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

src/getAccess.jsView file

•matchType = normalized_sha256 matchedPackage = fca-nx@1.1.0 matchedPath = src/getAccess.js matchedIdentity = npm:ZmNhLW54:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/getAccess.jsView on unpkg