registry / grapes-andrewdingus / 1.0.29

grapes-andrewdingus@1.0.29

GRAPES OS static site — CDN-ready via unpkg

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Visiting the leaderboard page executes JavaScript fetched live from GitHub outside the published package. This gives the remote repository control over browser-side code after package review and publication.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

User opens leaderboard.html in a browser.

Impact

Arbitrary browser-side code execution in the package origin context, with potential DOM/localStorage access or redirects controlled by the remote GitHub content.

Mechanism

remote JavaScript fetch followed by eval

Attack narrative

The package ships a static site, but leaderboard.html loads assets/js/leaderboard.js, which fetches scores.js from raw.githubusercontent.com and passes the returned text to eval. Because that code is not part of the npm artifact, it can be changed after publication to run arbitrary browser-side logic for any user visiting the leaderboard.

Rationale

Static inspection confirms a live remote-code execution path via fetch plus eval, not just a scanner label. Although there is no install-time behavior, the package delegates runtime code execution to mutable off-package content, which is a concrete malicious supply-chain attack surface for an npm-hosted static site.

Evidence

package.jsonleaderboard.htmlassets/js/leaderboard.jsassets/js/app_functions.js

Network endpoints2

raw.githubusercontent.com/grapes-os/grapes-os-leaderboard/main/scores.jshqlgppguxhqeaonjzinv.supabase.co

Decision evidence

public snapshot

AI called this Malicious at 94.0% confidence as Malware with low false-positive risk.

Evidence for block

assets/js/leaderboard.js fetches remote JavaScript from raw.githubusercontent.com.
assets/js/leaderboard.js immediately evals the fetched response in main().
leaderboard.html loads /assets/js/leaderboard.js with defer, activating on page visit.
package.json main is index.html and has no lifecycle scripts, so attack is runtime browser-side.

Evidence against

No install-time npm lifecycle hooks in package.json.
No Node child_process, filesystem writes, or process.env access found.
Supabase anon key in assets/js/app_functions.js is package-aligned browser client configuration.

Behavioral surface

Source

EvalNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 41.9 KB of source, external domains: 1.australianhuntermag.com.au, 1.belizebuilders.com, 1.burgermap.org, 1.chowpatty.com, 1.deleesportsmedicine.com, 1.lscomm.net, 1.oceanracingseries.co.za, 1.rodolfocolen.com, 1.room4rent.cl, 1.rootsbobcat.com, 1.southwestvoodoo.com, 1.tartsandcrafts.ca, 1.tomholden.info, 1.videospeed.cl, 1.vivocolor.cl, 2.intothelightprod.com, 2.macao.net, 57.admain.cl, acetaminophen.deleesportsmedicine.com, acting.intothelightprod.com, adsadkjsadjksakldjxx.math-solver.online, agent.room4rent.cl, alpha.y.glenwaverleychurches.org, antihistamines.medscience.cl, api.cloud.rigaprecast.com, app.cloud.rigaprecast.com, attractions.uk.to, aurora.xyz.moochurch.com, b.j0.icom.org.np, backend.development.sanluix.org, basketball.prosports.cl, behavior.lasersoft.net.au, beta.y.glenwaverleychurches.org, biology-img.shekinahphotography.com, blog.cloud.rigaprecast.com, boeing.morlockaerospace.com, books.michelleingah.com, ca.skimanshop.it, carriers.mobile-node.net, cdn.businessrelay.co.za, cdn.i-mind.cl, cdn.masonic-lodge.ca, cdn.yourciooncall.com, cheap.showmyhomes.com, cheap.winterhouse.info, china.dingshun.hk, china.taoism-dingshun.org, construct.rustyfoundation.com, coolmathgames.com, cultures.linexedu.eu

Source & flagged code

7 flagged

assets/js/app_functions.jsView file

Lines 1-23javascript

1const supabaseUrl = "https://hqlgppguxhqeaonjzinv.supabase.co";

2const supabaseKey =

3 "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImhxbGdwcGd1eGhxZWFvbmp6aW52Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3MzI2MjYwNDQsImV4cCI6MjA0ODIwMjA0NH0.4LuWk4qxp0NRZ5_erEIJq5BHq5qZiSE4zTUFS1ioZw8";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

assets/js/app_functions.jsView on unpkg · L3

Critical

Secret Pattern

Supabase service role key (JWT) in assets/js/app_functions.js

assets/js/app_functions.jsView on unpkg · L3

4const supabaseClient = supabase.createClient(supabaseUrl, supabaseKey);

6function getDescriptionFromMarkdown(markdown) {

7 if (!markdown) return "";

8 const descParts = markdown.split("## Description");

9 if (!descParts[1]) return "";

10 let built = descParts[1];

11 const creatorParts = built.split("## Creator");

12 built = creatorParts[0];

13 return built.replaceAll("\n", "");

14}

16function create_in_article_ad() {

17 /**

18 * <div class="ad">

19 <ins

20 class="adsbygoogle"

21 style="display: block"

22 data-ad-client="ca-pub-8362959866002557"

23 data-ad-slot="8239998772"

assets/js/leaderboard.jsView file

Lines 16-53javascript

16 add_new_score() {

17 let main_tag = document.getElementById("main");

18 main_tag.innerHTML += `

19 <div class="score-card">

20 <div class="card-text-align">

21 <h1 id="game" class="card-text">Game: ${this.game}</h1>

22 <h2 id="username" class="card-text">Player: ${

prepare-unpkg.ps1View file

•path = prepare-unpkg.ps1 kind = build_helper sizeBytes = 468 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

prepare-unpkg.ps1View on unpkg

Source & flagged code

7 flagged · loading source

assets/js/app_functions.jsView file

3patternName = supabase_service_key severity = critical line = 3 matchedText = "eyJhbGc...w8";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

assets/js/app_functions.jsView on unpkg · L3

3patternName = supabase_service_key severity = critical line = 3 matchedText = "eyJhbGc...w8";

Critical

Secret Pattern

Supabase service role key (JWT) in assets/js/app_functions.js

assets/js/app_functions.jsView on unpkg · L3

assets/js/leaderboard.jsView file

36async function getScores() { L37: let response = await fetch( L38: "https://raw.githubusercontent.com/grapes-os/grapes-os-leaderboard/main/scores.js", L39: ); L40: return await response.text(); // is promise for whatever reason L41: } ... L45: let js_code = await getScores(); L46: eval(js_code); // never use eval L47: } catch (e) {

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

assets/js/leaderboard.jsView on unpkg · L36

45let js_code = await getScores(); L46: eval(js_code); // never use eval L47: } catch (e) {

High

Eval

Package source references dynamic code evaluation.

assets/js/leaderboard.jsView on unpkg · L45

•matchType = normalized_sha256 matchedPackage = grapes-andrewdingus@1.0.25 matchedPath = assets/js/leaderboard.js matchedIdentity = npm:Z3JhcGVzLWFuZHJld2Rpbmd1cw:1.0.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/js/leaderboard.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 26a6083a366a497c signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = grapes-andrewdingus@1.0.25 matchedPath = assets/js/leaderboard.js matchedIdentity = npm:Z3JhcGVzLWFuZHJld2Rpbmd1cw:1.0.25 similarity = 1.000 shingleOverlap = 5 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

assets/js/leaderboard.jsView on unpkg

prepare-unpkg.ps1View file

•path = prepare-unpkg.ps1 kind = build_helper sizeBytes = 468 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

prepare-unpkg.ps1View on unpkg

Findings

3 Critical3 High3 Medium2 Low

CriticalCritical Secretassets/js/app_functions.js

CriticalRemote Asset Decode Executeassets/js/leaderboard.js

CriticalSecret Patternassets/js/app_functions.js

HighEvalassets/js/leaderboard.js

HighKnown Malware Source Similarityassets/js/leaderboard.js

HighKnown Malware Source Fingerprint Signatureassets/js/leaderboard.js

MediumNetwork

MediumShips Build Helperprepare-unpkg.ps1

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowUrl Strings