registry / kepler / 2.999.999

kepler@2.999.999

Generated package

AI Security Review

scanned 10d ago · by lpm-firewall-ai

Installing kepler fetches an externally hosted dependency whose lockfile metadata declares an install script. The dependency's source is not included, so its install behavior cannot be verified from this package.

Static reason

No blocking static signals were detected.

Trigger

npm installation of kepler

Impact

Unverified install-time code from the external dependency may execute.

Mechanism

URL dependency with declared install script

Rationale

The package itself is inert, but it delegates install-time execution to an unverified URL dependency without an integrity hash. This is a real unresolved supply-chain risk, not source-confirmed malware.

Evidence

package.jsonnpm-shrinkwrap.jsonindex.jsREADME.md

Network endpoints1

artifacts.yosiroute.com/npm/flag-serial-object-syntax

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-13369

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in kepler (npm)

Details

kepler@2.0.999 declares its only runtime dependency, flag-serial-object-syntax, as an HTTP URL to a third-party host (https://artifacts.yosiroute.com/npm/flag-serial-object-syntax) rather than a version resolved from the npm registry, and the shrinkwrap marks that dependency with hasInstallScript: true. Running `npm install kepler` fetches an unpinned, unverified tarball from artifacts.yosiroute.com and executes its lifecycle scripts on the installer's machine. The URL carries no version and no integrity metadata, so its contents can change at any time under the third-party host's control. The kepler package itself has placeholder metadata (author `Package Registry`, repository `github.com/example/...`) unrelated to the yosiroute.com host, and ships no first-party code that would justify sourcing a dependency off-registry. The dependency-tree-hijack shape — an off-registry, mutable, install-scripted tarball pulled in transitively — means any code the operator of artifacts.yosiroute.com serves runs with the privileges of the installer on `npm install`.

References

OSV advisory PACKAGE PACKAGE PACKAGE PACKAGE PACKAGE PACKAGE

Decision evidence

public snapshot

AI called this Suspicious at 85.0% confidence as Unknown with medium false-positive risk.

Evidence for block

package.json depends on a URL-hosted package at artifacts.yosiroute.com.
npm-shrinkwrap.json marks that dependency hasInstallScript: true.
The lockfile lacks an integrity hash for the URL dependency.

Evidence against

package.json defines no lifecycle scripts.
index.js only exports static name/version metadata.
No local source reads secrets, spawns processes, writes files, or performs network calls.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 62 B of source

Source & flagged code

1 flagged

package.jsonView file

•Published source reference

High

Ai Review Evidence

package.json depends on a URL-hosted package at artifacts.yosiroute.com.

package.jsonView on unpkg

Source & flagged code

1 flagged · loading source

package.jsonView file

•Published source reference

High

Ai Review Evidence

package.json depends on a URL-hosted package at artifacts.yosiroute.com.

package.jsonView on unpkg

Findings

3 High

HighAi Review Evidencepackage.json

HighSuspicious Dependency Evidence