registry / Data exfiltration / iot-kfh-s3
iot-kfh-s3
A utility package that reports runtime errors to Sentry using @sentry/node.
This report shows the evidence for iot-kfh-s3@17.3.23. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe install hook performs concrete network collection and remote reporting rather than a package-aligned build/setup task. Its hardcoded destination and forced demo event make the behavior malicious in an npm install context.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Running `npm install iot-kfh-s3` activates `preinstall`.
Impact
Exposes installer network identity and runtime/error metadata to a package-controlled third party without consent.
Mechanism
install-time public-IP collection and Sentry event exfiltration
Attack narrative
Installing the package invokes `examples/verify.js` before installation completes. That script initializes a hardcoded Sentry destination, requests the installer machine's public IP from Cloudflare, sets it as Sentry user data, intentionally raises an exception, and flushes the event. This creates an unconsented install-time telemetry and data-exfiltration path.
AI rationale
The install hook performs concrete network collection and remote reporting rather than a package-aligned build/setup task. Its hardcoded destination and forced demo event make the behavior malicious in an npm install context.
Evidence
package.jsonexamples/verify.jssrc/index.js
Network endpoints4
www.cloudflare.com/cdn-cgi/traceone.one.one.one/cdn-cgi/trace1.1.1.1/cdn-cgi/trace30ac1f6d2b8675e25a1314b7829c30c2@o4510485815754752.ingest.us.sentry.io/4511632673275909
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- `package.json` runs `npm install @sentry/node && node examples/verify.js` during `preinstall`.
- `examples/verify.js` calls `setUserFromPublicIp` and deliberately throws an error on installation.
- `src/index.js` fetches the installer host's public IP from Cloudflare trace endpoints.
- `src/index.js` initializes Sentry with a hardcoded external DSN and `sendDefaultPii: true`.
- The verification error and collected IP are sent through the Sentry client without an installer opt-in.
Evidence against
- No source evidence of shell execution beyond the manifest command.
- No filesystem harvesting, credential enumeration, persistence, or AI-agent configuration writes found.
- No dynamic code loading or obfuscated payload found.
Behavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = npm install @sentry/node && node examples/verify.js
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.preinstall = npm install @sentry/node && node examples/verify.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgsrc/index.jsView file
•matchType = normalized_sha256
matchedPackage = salesforce-vscode-slds@2026.7.11
matchedPath = src/index.js
matchedIdentity = npm:c2FsZXNmb3JjZS12c2NvZGUtc2xkcw:2026.7.11
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/index.jsFindings
1 Critical3 High2 Medium3 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similaritysrc/index.js
HighKnown Malware Source Fingerprint Signaturesrc/index.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to iot-kfh-s3@17.3.23.
The versions list below shows the verdict for each recorded version.
- Avoid installing iot-kfh-s3@17.3.23. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.