registry / Remote code execution / imgdecode
imgdecode
Native image buffer decoder for Node.js build pipelines
This report shows the evidence for imgdecode@1.0.3. 4 of 6 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe entrypoint activates a native initializer that fetches remote data and routes non-image responses into process injection code. This concrete remote execution behavior warrants blocking publication.
Static reason
No blocking static signals were detected.
Trigger
Importing the package on Windows when the native addon's console check succeeds.
Impact
A remote payload can execute inside another process.
Mechanism
The addon fetches and reads remote bytes; responses that fail its image signature checks are passed to a helper using process creation and remote memory APIs.
Attack narrative
Importing the package loads its Windows native addon. During initialization, the addon fetches remote content and passes responses that do not match its image checks to process execution helpers. This is an active remote payload execution path.
AI rationale
The entrypoint activates a native initializer that fetches remote data and routes non-image responses into process injection code. This concrete remote execution behavior warrants blocking publication.
Evidence
package.jsonindex.js.lpm-inspection-09AlRH/0-a53946269ffc.txtprebuilds/win32-x64/imgdecode.node
Network endpoints1
raw.githubusercontent.com
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package entrypoint immediately loads the bundled Windows native addon when imported.
- The native initializer calls a routine that opens a WinINet URL and reads the response.
- Downloaded content is checked for image signatures; other content reaches a helper that processes the supplied bytes.
- The helper contains obfuscated process API names, including process creation, remote memory allocation, and thread resumption, and makes indirect calls using supplied data.
Evidence against
Behavioral surface
NativeBindings
Trivial
Source & flagged code
10 flagged · loading sourceprebuilds/win32-x64/imgdecode.nodeView file
•path = prebuilds/win32-x64/imgdecode.node
kind = native_binary
sizeBytes = 703488
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
prebuilds/win32-x64/imgdecode.nodeView on unpkgpackage.jsonView file
•scripts registry_only=install
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg1{
"name": "imgdecode",
"version": "1.0.3",
"description": "Native image buffer decoder for Node.js build pipelines",
"main": "index.js",
"keywords": ["image", "decode", "buffer", "native", "addon", "pipeline"],
"author": "build-tools-community",
"license": "MIT",
"files": [
"index.js",
"readme.md",
"prebuilds"
]
}
High
Ai Review Evidence
Findings
1 Critical8 High1 Medium
CriticalManifest Confusionpackage.json
HighAi Review Evidencepackage.json
HighAi Review Evidenceindex.js
HighAi Review Evidence.lpm-inspection-09AlRH/0-a53946269ffc.txt
HighAi Review Evidence.lpm-inspection-09AlRH/0-a53946269ffc.txt
HighAi Review Evidence.lpm-inspection-09AlRH/0-a53946269ffc.txt
HighAi Review Evidence.lpm-inspection-09AlRH/0-a53946269ffc.txt
HighAi Review Evidence.lpm-inspection-09AlRH/0-a53946269ffc.txt
HighAi Review Evidence.lpm-inspection-09AlRH/0-a53946269ffc.txt
MediumShips Native Binaryprebuilds/win32-x64/imgdecode.node
Affected versions and remediation
This report applies to imgdecode@1.0.3.
The versions list below shows the verdict for each recorded version.
- Avoid installing imgdecode@1.0.3. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.