registry / json-to-table-util / 1.0.0

json-to-table-util@1.0.0

JSON to HTML/Markdown table conversion helpers

AI Security Review

scanned 18d ago · by lpm-firewall-ai

Installing the package automatically executes reconnaissance and environment harvesting. The collected data is exfiltrated to an external OAST host.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install, via postinstall

Impact

Exposure of CI/environment variables, host details, network configuration, and cloud-metadata reachability.

Mechanism

install-time shell-based environment collection and HTTP exfiltration

Attack narrative

During installation, package.json invokes postinstall.js. That script runs shell commands to gather host, CI, process, network, and filtered environment data, probes cloud metadata endpoints, encodes the results, and transmits them to a third-party OAST domain. This is unconsented install-time reconnaissance and exfiltration unrelated to the stated utility.

Rationale

Direct source inspection confirms concrete install-time data collection and exfiltration. The benign main entrypoint does not mitigate the malicious lifecycle behavior.

Evidence

package.jsonpostinstall.jsindex.js

Network endpoints3

metadata.tencentyun.com/latest/meta-data/169.254.169.254/latest/meta-data/pzs5w7ntzhsnepwk564lyfdci3oucl0a.oastify.com/z?d=$data

OSV Corroboration

postinstall.js runs automatically on `npm install` and executes a shell pipeline via child_process.exec that collects hostname, user, working directory, uname, container/cgroup indicators, process tree, network info (/etc/resolv.conf, IPs), GitHub Actions CI variables (GITHUB_REPOSITORY, GITHUB_ACTOR, GITHUB_RUN_ID, RUNNER_NAME), and the entire process environment via `env` (filtering only npm_* noise). It also probes AWS IMDS at 169.254.169.254 and Tencent Cloud metadata at metadata.tencentyun.com to fingerprint cloud infrastructure. The aggregated output is base64-encoded and sent over plain HTTP via curl GET to the hardcoded Burp Collaborator subdomain pzs5w7ntzhsnepwk564lyfdci3oucl0a.oastify.com/z?d=<base64>. On CI runners this captures any secrets exported to the environment (cloud keys, GITHUB_TOKEN, tokens injected into the job). ## Source: ossf-package-analysis (63ee08885a126855fbc96dbbb6f8c4ef903d9dc8f2cb02fe0fa178a7db1ed904) The OpenSSF Package Analysis project identified 'json-to-table-util' @ 1.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

json-to-table-util@1.0.0

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code