registry / Data exfiltration / lambda-cloudwatch-cdk

lambda-cloudwatch-cdk

A utility package that reports runtime errors to Sentry using @sentry/node.

This report shows the evidence for lambda-cloudwatch-cdk@0.0.0. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Source inspection confirms an unconsented install-time telemetry/exfiltration chain rather than a benign user-invoked monitoring feature. The lifecycle script collects a public IP and sends a deliberately generated event to a hard-coded third-party project.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm preinstall

Impact

Unconsented disclosure of the installer host's public IP and runtime metadata to a package-controlled Sentry endpoint.

Mechanism

install-time public-IP collection and Sentry event upload

Attack narrative

During `preinstall`, npm runs `examples/verify.js`. That script initializes the library using its embedded Sentry DSN, requests the installer machine's public IP from Cloudflare, stores it as Sentry user data, triggers a deliberate exception, and flushes the event to Sentry. This network collection and upload happen merely from installation, not from an explicit runtime monitoring action by the consumer.

AI rationale

Evidence

package.jsonexamples/verify.jssrc/index.js

Network endpoints2

www.cloudflare.com/cdn-cgi/trace30ac1f6d2b8675e25a1314b7829c30c2@o4510485815754752.ingest.us.sentry.io/4511632673275909

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

`package.json` runs `examples/verify.js` in `preinstall`.
`examples/verify.js` fetches the install host's public IP.
`src/index.js` attaches that IP to Sentry user data.
`examples/verify.js` deliberately captures an error and flushes it.
`src/index.js` embeds a default Sentry ingestion DSN.
Runtime defaults enable `sendDefaultPii: true`.

Evidence against

No filesystem writes or persistence code found.
No shell execution beyond the manifest lifecycle command.
No dynamic code loading or evaluator primitives found.
No AI-agent control-surface mutation found.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 10.4 KB of source, external domains: 1.1.1.1, one.one.one.one, www.cloudflare.com

Source & flagged code

4 flagged

package.jsonView file

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/index.jsView file

•matchType = normalized_sha256 matchedPackage = alb-lambda-cdk@18.2.22 matchedPath = src/index.js matchedIdentity = npm:YWxiLWxhbWJkYS1jZGs:18.2.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 77336ad547d16a1c signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = alb-lambda-cdk@18.2.22 matchedPath = src/index.js matchedIdentity = npm:YWxiLWxhbWJkYS1jZGs:18.2.22 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

src/index.jsView on unpkg

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/index.js

Findings

1 Critical3 High2 Medium3 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighKnown Malware Source Similaritysrc/index.js

HighKnown Malware Source Fingerprint Signaturesrc/index.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to lambda-cloudwatch-cdk@0.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing lambda-cloudwatch-cdk@0.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-04 23:05:16.354Z (UTC).

Source advisory published: 2026-07-20 17:03:57.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

0.0.1-securitylatestClean—AllowPublishedJul 20, 2026, 5:02 PM 0.0.0shownMaliciousData ExfiltrationBlockPublishedJul 18, 2026, 4:12 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other data exfiltration packages

Behavioral surface

Related packages

Other data exfiltration packages

Source & flagged code