registry / Credential exfiltration / invoice-scrape-agent
invoice-scrape-agent
BDB Invoice & Receipt Scraper Suite for headless automation, cross-platform Uber & AliExpress tax invoice fetcher, receipt PNG-to-PDF normalizer, and PDF accounting analyzer
This report shows the evidence for invoice-scrape-agent@1.6.3. 1 of 6 known versions is blocked or flagged. The newest version, 1.6.4, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiA bundled session credential is concrete credential exposure, supported by source that collects and persists browser cookies to the same file. The lifecycle hooks add unrequested user-environment changes, reinforcing the need to block publication.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Package download exposes the bundled credential; npm installation runs the lifecycle hooks.
Impact
The credential may permit unauthorized Uber account access, and installation alters user files.
Mechanism
Published session credential and unsolicited install-time Desktop file creation.
Attack narrative
The package includes a large COOKIE value in a published Uber environment file. Its own authentication source shows that this file stores browser session cookies, so distributing it exposes likely account credentials to every recipient. Separately, the lifecycle hooks create executable Desktop shortcuts during installation and can offer to terminate matching background processes. The credential disclosure is a concrete security harm despite the otherwise package-aligned invoice-scraping functions.
AI rationale
A bundled session credential is concrete credential exposure, supported by source that collects and persists browser cookies to the same file. The lifecycle hooks add unrequested user-environment changes, reinforcing the need to block publication.
Evidence
services/uber/.envservices/uber/auth.jsutils/shortcut-maker.jsutils/env-check.jspackage.json
Network endpoints3
registry.npmjs.org/invoice-scrape-agent/latestriders.uber.com/www.aliexpress.com/p/order/index.html
Decision evidence
public snapshotAI called this Malicious at 94.0% confidence as Malware with low false-positive risk.
Evidence for block
- The published services/uber/.env contains a 8,396-character COOKIE value, consistent with a session credential.
- The Uber login code collects browser cookies and writes them to services/uber/.env, exposing that credential when the file is published.
- The postinstall hook creates executable Desktop command files without an explicit user action.
- The preinstall hook finds cron-runner processes and can force-kill selected process IDs.
Evidence against
- Inspected network code targets the npm registry and the invoicing services named by the package.
- No remote-code loader, eval, or hidden data-exfiltration endpoint was found in the inspected source.
- The Desktop shortcuts invoke the package's declared CLI and GUI commands.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node utils/shortcut-maker.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgservices/uber/.envView file
1patternName = blocked_file
severity = critical
matchedText = services/uber/.env
redactedSecretContext =
secretLikeLines = 1
L1: COOKIE=<redacted:8394 token-like>
Critical
Critical Secret
Package contains a critical-looking secret pattern.
services/uber/.envView on unpkg · L1index.jsView file
3const inquirer = require('inquirer').default || require('inquirer');
L4: const { execSync } = require('child_process');
L5: const path = require('path');
Findings
2 Critical4 High6 Medium4 Low
CriticalCritical Secretservices/uber/.env
CriticalPrevious Version Dangerous Deltaelectron/main.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processindex.js
HighShellindex.js
HighRuntime Package Installindex.js
MediumDynamic Requireanalyzer.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binaryassets/set_icon
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to invoice-scrape-agent@1.6.3.
The versions list below shows the verdict for each recorded version.
- Avoid installing invoice-scrape-agent@1.6.3. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.