registry / Data exfiltration / gfff5
gfff5
System binary configuration tool
This report shows the evidence for gfff5@1.0.0, the only known version.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is concrete runtime data exfiltration, not merely a capability library: clipboard transmission starts automatically when the CLI runs. The absence of an install hook limits install-time impact but does not negate the malicious user-data collection behavior.
Static reason
No blocking static signals were detected.
Trigger
User runs the gfff5 executable; clipboard monitoring begins at runtime.
Impact
Sensitive clipboard contents and screenshots can be disclosed remotely.
Mechanism
Clipboard and screen capture exfiltration to a hard-coded API
Attack narrative
The package presents as a system configuration tool but its CLI runs a Python overlay. While visible by default, it polls the clipboard and sends changed text to a remote endpoint automatically. Its hotkey path captures the entire screen and uploads the encoded image to the same endpoint. Stealth-oriented hidden UI and hotkeys reduce user awareness of this behavior.
AI rationale
This is concrete runtime data exfiltration, not merely a capability library: clipboard transmission starts automatically when the CLI runs. The absence of an install hook limits install-time impact but does not negate the malicious user-data collection behavior.
Evidence
package.jsonindex.jspointer.py
Network endpoints1
iq-sec.vercel.app/api
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The executable launches pointer.py after the user runs the gfff5 CLI.
- pointer.py polls the clipboard and automatically posts changed text to a hard-coded remote API.
- It captures a full screen, base64-encodes it, and posts the image to that API.
- The UI is deliberately near-invisible and provides stealth hide/show hotkeys.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- Screen capture is initiated through a registered hotkey, although clipboard transfer is automatic.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
Source & flagged code
1 flagged · loading sourcepointer.pyView file
•path = pointer.py
kind = build_helper
sizeBytes = 31813
magicHex = [redacted]
Medium
Findings
3 Medium4 Low
MediumEnvironment Vars
MediumShips Build Helperpointer.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to gfff5@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing gfff5@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.