m0603-tea@1.0.2
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package’s only exported operation routes caller-provided text to a fixed Gmail address chosen in the source. Although sending requires an explicit function call, the API offers no recipient choice, making the caller’s SMTP account a channel for sending data to that selected target.
Static reason
No blocking static signals were detected.
Trigger
A caller invokes the exported send(str) function.
Impact
Text passed to the function is disclosed to the fixed recipient, and the caller's SMTP account is used to send it.
Mechanism
The function submits the supplied string as an email body to kate.tarasevich13@gmail.com through Nodemailer, using SMTP settings from the environment or the smtp.yandex.ru default.
Attack narrative
When a caller invokes send(str), the package sends that text to kate.tarasevich13@gmail.com. The destination is fixed in the package, so callers cannot direct the message to a recipient of their choice through this API. This uses the configured SMTP account to send caller-provided content to a publisher-selected target.
AI rationale
The package’s only exported operation routes caller-provided text to a fixed Gmail address chosen in the source. Although sending requires an explicit function call, the API offers no recipient choice, making the caller’s SMTP account a channel for sending data to that selected target.
Evidence
m0603.js
Network endpoints1
smtp.yandex.ru
Decision evidence
public snapshotAI called this Malicious at 88.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package describes itself as mail and uses m0603.js as its main entry point.
- The entry point fixes the recipient as kate.tarasevich13@gmail.com.
- Calling send(str) sends the supplied string as the email body to that fixed recipient using the configured SMTP transport.
Evidence against
- Importing the package creates a transport but does not itself send an email; sending requires a call to send.
- The SMTP host and credentials come from environment variables, with smtp.yandex.ru as the default host.
Behavioral surface
EnvironmentVars
Source & flagged code
3 flaggedpackage.jsonView file
1{
"dependencies": {
"nodemailer": "^10.2.1"
},
"name": "m0603-tea",
"version": "1.0.2",
"description": "mail",
"main": "m0603.js",
"devDependencies": {},
High
Ai Review Evidence
The package describes itself as mail and uses m0603.js as its main entry point.
package.jsonView on unpkg · L1m0603.jsView file
4// Фиксированный адрес получателя
const RECEIVER = 'kate.tarasevich13@gmail.com';
//afsefcaesfcsewfsedfsewf
// Параметры SMTP (по умолча
High
Ai Review Evidence
The entry point fixes the recipient as kate.tarasevich13@gmail.com.
m0603.jsView on unpkg · L417// send(str [, callback]) - отправляет письмо со строкой str на RECEIVER
function send(str, callback) {
return transporter
.sendMail({
from: process.env.SMTP_USER || 'm0603@localhost',
to: RECEIVER,
subject: 'm0603',
text: String(str)
})
.then(info => {
if (callback) callback(null, info);
return info;
})
Findings
3 High1 Medium
HighAi Review Evidencepackage.json
HighAi Review Evidencem0603.js
HighAi Review Evidencem0603.js
MediumEnvironment Vars
Affected versions and remediation
This report applies to m0603-tea@1.0.2.
See all versions of m0603-tea for other recorded verdicts.
- Avoid installing m0603-tea@1.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.