registry / Remote code execution / items-validator
items-validator
Real-time game items validator with background daemon for client project updates
This report shows the evidence for items-validator@1.0.5. 2 of 3 known versions are blocked or flagged. The newest version, 0.0.0-stage, is allowed. See all versions.
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe import-time daemon and remote Function execution form an active remote-code-execution path. The cryptographic check authenticates the operator payload rather than constraining its capabilities.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Importing the package loads index.js.
Impact
The remote signing-key holder can run arbitrary JavaScript in the consuming environment without a direct user action.
Mechanism
The entrypoint spawns a detached daemon; the daemon fetches a payload, verifies its signature, and passes its code to Function.
Attack narrative
A normal import launches a detached process that contacts the package-controlled service. The service response contains JavaScript that is executed after signature validation. Signature validation prevents third-party tampering but leaves the remote key holder able to change code executed on every importing machine.
AI rationale
The import-time daemon and remote Function execution form an active remote-code-execution path. The cryptographic check authenticates the operator payload rather than constraining its capabilities.
Evidence
index.jslib/check-items.js
Network endpoints1
game.spawnrealm.com
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- Package metadata exposes index.js as the import entrypoint.
- Importing the package automatically starts a detached Node daemon.
- The daemon fetches code from a hard-coded remote host and runs the received code with Function after signature verification.
Evidence against
- The daemon rejects payloads whose signatures do not verify against the bundled public key.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flagged · loading sourceindex.jsView file
1const { spawn } = require('child_process');
L2: const path = require('path');
High
1Cross-file remote execution chain: index.js spawns lib/check-items.js; helper contains network access plus dynamic code execution.
L1: const { spawn } = require('child_process');
L2: const path = require('path');
...
L10: try {
L11: const daemonScript = path.resolve(__dirname, './lib/check-items.js');
L12:
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
index.jsView on unpkg · L124// Automatically initialize on require
initializeDaemon();
function getStatus() {
return {
name: 'items-va
High
Ai Review Evidence
Importing the package automatically starts a detached Node daemon.
index.jsView on unpkg · L2413const child = spawn('node', [daemonScript], {
detached: true,
stdio: 'ignore'
});
child.unref();
logger.log('Background validation daemon started');
} catch (error) {
logg
Findings
7 High1 Medium4 Low
HighChild Processindex.js
HighCross File Remote Execution Contextindex.js
HighKnown Malware Source SimilaritySERVER_IMPLEMENTATION_EXAMPLE.js
HighKnown Malware Source Fingerprint SignatureSERVER_IMPLEMENTATION_EXAMPLE.js
HighAi Review Evidencepackage.json
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
MediumNetwork
LowEvallib/check-items.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to items-validator@1.0.5.
The versions list below shows the verdict for each recorded version.
- Avoid installing items-validator@1.0.5. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.