registry / Remote code execution / hardhat-devkit
hardhat-devkit
This document describes the management of vulnerabilities for the project and all modules within the organization.
This report shows the evidence for hardhat-devkit@2.3.6. 2 of 2 known versions are blocked or flagged. The newest version, 2.0.1, is blocked. See all versions.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiImporting the package runs a packed dropper that collects host identity, talks over axios, and executes decoded code with Function and execSync. The Pino-looking docs and empty middleware do not explain that behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Any install or runtime import of hardhat-devkit, including require of index.js.
Impact
The importing process can run attacker-chosen code, spawn shell commands, and send host identity to a remote server.
Mechanism
Import-time obfuscated dropper with remote fetch and local command execution
Attack narrative
When an app imports hardhat-devkit, index.js immediately requires lib/config.js. That file is packed obfuscated code, not logger setup. It fingerprints host, operating system, and username, posts with axios, builds a Function from decoded text, and runs execSync or spawn. Copied Pino docs and an empty Express middleware hide this import-time dropper. There is no Hardhat or logging reason for that chain.
AI rationale
Importing the package runs a packed dropper that collects host identity, talks over axios, and executes decoded code with Function and execSync. The Pino-looking docs and empty middleware do not explain that behavior.
Evidence
package.jsonindex.jslib/config.js
Decision evidence
public snapshotAI called this Malicious at 95.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package is named hardhat-devkit but uses a stolen Pino vulnerability-policy description and logger keywords, not a Hardhat toolkit.
- index.js loads lib/config.js as soon as the package is imported.
- lib/config.js is one packed obfuscated line that builds and runs a Function from decoded strings.
- That loader requires axios and crypto, then posts with a Content-Type and validation header.
- Top-level code requires os, fs, execSync, and spawn, then calls execSync with concatenated strings.
- It fingerprints host, operating system, and username into a Utils helper.
Evidence against
- package.json has no preinstall, install, or postinstall scripts.
- Other lib files still look like leftover Pino logger source and are not the dropper.
Behavioral surface
ChildProcessEnvironmentVars
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flagged · loading sourceindex.jsView file
3const path = require('path');
L4: const { spawn } = require('child_process');
L5: const { DEFAULT_LEVELS, SORTING_ORDER } = require('./lib/constants');
High
4const { spawn } = require('child_process');
const { DEFAULT_LEVELS, SORTING_ORDER } = require('./lib/constants');
const config = require('./lib/config');
High
Ai Review Evidence
index.js loads lib/config.js as soon as the package is imported.
index.jsView on unpkg · L4lib/config.jsView file
1function mX(F,S,Y,E,i){const Ta={F:0x2d8};return T(S-Ta.F,Y);}function mI(F,S,Y,E,i){const Tr={F:0x112};return j(F-Tr.F,S);}function mL(F,S,Y,E,i){const Tq={F:0x12b};return T(i-Tq....
Critical
Download Execute
Source downloads or fetches remote code and executes it.
lib/config.jsView on unpkg · L1Findings
2 Critical5 High2 Medium3 Low
CriticalDownload Executelib/config.js
CriticalTrigger Reachable Dangerous Capabilitylib/config.js
HighChild Processindex.js
HighSemantic Analysis Limitedlib/config.js
HighAi Review Evidencepackage.json
HighAi Review Evidenceindex.js
HighAi Review Evidencelib/config.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to hardhat-devkit@2.3.6.
The versions list below shows the verdict for each recorded version.
- Avoid installing hardhat-devkit@2.3.6. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.