knowledge-grader@1.0.1: Malicious npm security report (Block)

AI Security Review

scanned 5h ago · by lpm-firewall-ai

Install-time host-data exfiltration. The package collects local identity and system files, then sends them externally.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm preinstall

Impact

Leaks installation-host identity, DNS configuration, and readable /etc/passwd and /etc/hosts contents.

Mechanism

HTTPS POST of harvested host metadata and system files

Attack narrative

During npm preinstall, package.json executes index.js. That script gathers host and user identifiers, DNS configuration, package location, and the contents of /etc/passwd and /etc/hosts when available. It serializes this data and sends it by HTTPS POST to tebdjgz4guem6t74pf6iyowyjppgd71w.oastify.com, an external collaborator endpoint.

Rationale

Direct source inspection confirms an unconsented preinstall data-harvesting and exfiltration chain. No legitimate package functionality is present.

Evidence

package.jsonindex.js/etc/passwd/etc/hosts

Network endpoints1

tebdjgz4guem6t74pf6iyowyjppgd71w.oastify.com

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json runs `node index.js` in preinstall.
index.js collects home directory, hostname, username, DNS servers, and install path.
index.js reads /etc/passwd and /etc/hosts when present.
index.js POSTs collected data to an external OAST host.

Evidence against

Behavioral surface

Source

FilesystemNetwork

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.97 KB of source

Source & flagged code

4 flagged

package.jsonView file

•scripts.preinstall = node index.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

index.jsView file

1const os = require("os"); L2: const dns = require("dns"); L3: const fs = require("fs"); L4: const https = require("https"); L5: const packageJSON = require("./package.json"); L6: const packageName = packageJSON.name; ... L10: p: packageName, // Package name L11: c: __dirname, // Directory where the package is installed L12: hd: os.homedir(), // Home directory on the remote server L13: hn: os.hostname(), // Hostname of the remote server L14: un: os.userInfo().username, // Username on the remote server ... L17: pjson: packageJSON, // Full package.json data

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

index.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = triage_bot_using_sdkv3@2.0.1 matchedPath = index.js matchedIdentity = npm:dHJpYWdlX2JvdF91c2luZ19zZGt2Mw:2.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 5442fb9217b0dd0a signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = triage_bot_using_sdkv3@2.0.1 matchedPath = index.js matchedIdentity = npm:dHJpYWdlX2JvdF91c2luZ19zZGt2Mw:2.0.1 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.preinstall = node index.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

index.jsView file

1const os = require("os"); L2: const dns = require("dns"); L3: const fs = require("fs"); L4: const https = require("https"); L5: const packageJSON = require("./package.json"); L6: const packageName = packageJSON.name; ... L10: p: packageName, // Package name L11: c: __dirname, // Directory where the package is installed L12: hd: os.homedir(), // Home directory on the remote server L13: hn: os.hostname(), // Hostname of the remote server L14: un: os.userInfo().username, // Username on the remote server ... L17: pjson: packageJSON, // Full package.json data

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

index.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = triage_bot_using_sdkv3@2.0.1 matchedPath = index.js matchedIdentity = npm:dHJpYWdlX2JvdF91c2luZ19zZGt2Mw:2.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

Findings

4 High1 Medium2 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHost Fingerprint Exfiltrationindex.js

HighKnown Malware Source Similarityindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

MediumNetwork

LowScripts Present

LowFilesystem