m0603-nosovich@1.0.2
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe exported function sends arbitrary caller-provided content to a hardcoded Gmail recipient, making the package a concealed data collection path. It is not triggered on import or install, but the undisclosed fixed destination makes the behavior malicious when invoked.
Static reason
No blocking static signals were detected.
Trigger
A consumer calls the exported send(message) function.
Impact
Content passed to the function is disclosed to the fixed recipient, without the caller having control over or notice of the destination.
Mechanism
The function passes message as the email HTML body and hardcodes the sender and recipient to the same Gmail address.
Attack narrative
When a consumer calls send(message), the package emails that content to arseniy.nosovichv@gmail.com. The recipient is fixed in the entry point and cannot be selected by the caller, so the function can disclose content to the package publisher's chosen address.
AI rationale
The exported function sends arbitrary caller-provided content to a hardcoded Gmail recipient, making the package a concealed data collection path. It is not triggered on import or install, but the undisclosed fixed destination makes the behavior malicious when invoked.
Evidence
index.js
Network endpoints2
gmail.com127.0.0.1
Decision evidence
public snapshotAI called this Malicious at 96.0% confidence as Malware with low false-positive risk.
Evidence for block
- The entry point exports a send(message) function that sends the supplied message as email.
- The sender and recipient are both hardcoded to arseniy.nosovichv@gmail.com; the package does not let callers choose the recipient.
- The manifest has no install lifecycle scripts; the email send occurs only when send(message) is called.
Evidence against
- Importing index.js defines the send function but does not call it automatically.
- The package uses a mail-sending dependency, which is consistent with email delivery as a capability.
Behavioral surface
Source & flagged code
3 flaggedindex.jsView file
5const FIXED_EMAIL = 'arseniy.nosovichv@gmail.com';
function send(message) {
sendmail({
from: FIXED_EMAIL,
to: FIXED_EMAIL,
subject: 'Сообщение из
High
Ai Review Evidence
The entry point exports a send(message) function that sends the supplied message as email.
index.jsView on unpkg · L55const FIXED_EMAIL = 'arseniy.nosovichv@gmail.com';
function send(message) {
sendmail({
from: FIXED_EMAIL,
to: FIXED_EMAIL,
subject: 'Сообщение из
High
Ai Review Evidence
The sender and recipient are both hardcoded to arseniy.nosovichv@gmail.com; the package does not let callers choose the recipient.
index.jsView on unpkg · L5package.jsonView file
5"main": "index.js",
"scripts": {
"test": "echo \"Error: no test specified\" && exit 1"
},
"keywords": [],
"author": "",
"licens
High
Suspicious Lifecycle Evidence
Findings
3 High1 Low
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
HighSuspicious Lifecycle Evidencepackage.json
LowScripts Present
Affected versions and remediation
This report applies to m0603-nosovich@1.0.2.
See all versions of m0603-nosovich for other recorded verdicts.
- Avoid installing m0603-nosovich@1.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.