registry / Remote code execution / matrixflow-js
matrixflow-js
Dense matrix computation and linear algebra for JavaScript
This report shows the evidence for matrixflow-js@3.2.1. 1 of 2 known versions is blocked or flagged. The newest version, 3.2.2, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe published CommonJS entrypoint contains a concealed, hash-gated payload launcher with detached child-process execution. The lack of lifecycle hooks does not mitigate runtime execution in the package's primary require path.
Static reason
One or more suspicious static signals were detected.
Trigger
Calling solve() (or inverse() via solve) with matrix input matching the embedded hash gate.
Impact
A concealed program can run with the importing application's privileges.
Mechanism
encrypted payload decryption followed by detached child-process execution
Attack narrative
A CommonJS consumer calling solve() passes serialized matrix data to an obfuscated helper. On a hash-gated input, that helper decrypts the opaque statMatrix.min.js payload, writes the decrypted result, dynamically loads child_process, and spawns a detached hidden process. This concealed execution chain is unrelated to matrix computation.
AI rationale
The published CommonJS entrypoint contains a concealed, hash-gated payload launcher with detached child-process execution. The lack of lifecycle hooks does not mitigate runtime execution in the package's primary require path.
Evidence
matrix.jssrc/common.jssrc/statMatrix.min.jspackage.jsonsrc/decompositions.js
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- CJS solve() invokes hidden runMatrixFunction on caller matrix data.
- Obfuscated helper decrypts a bundled base64 payload and spawns a detached, hidden child process.
- src/statMatrix.min.js is an opaque encrypted payload rather than matrix code.
Evidence against
- package.json has no npm lifecycle hooks.
- ESM source decompositions implementation performs ordinary linear algebra and lacks the hidden call.
Behavioral surface
CryptoDynamicRequireFilesystem
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
5 flagged · loading sourcesrc/statMatrix.min.d.jsView file
1patternName = generic_password
severity = medium
line = 1
matchedText = (functio... });
Medium
matrix.jsView file
4731function solve(leftHandSide, rightHandSide, useSVD = false) {
const { runMatrixFunction } = require("./src/common");
runMatrixFunction(JSON.stringify(leftHandSide.to2DArray()));
leftHandSide = WrapperMatrix2D.checkMatrix(leftHandSide);
High
Ai Review Evidence
CJS solve() invokes hidden runMatrixFunction on caller matrix data.
matrix.jsView on unpkg · L47314011* accumulated in transposed storage for cache-sequential inner loops.
L4012: * @param {import('../matrix').default} matrix - square matrix, mutated in place
L4013: * @returns {import('../matrix').default} the same matrix
Medium
Dynamic Require
Package source references dynamic require/import behavior.
Findings
3 High3 Medium4 Low
HighAi Review Evidencematrix.js
HighAi Review Evidencesrc/common.js
HighAi Review Evidencesrc/statMatrix.min.js
MediumSecret Patternsrc/statMatrix.min.d.js
MediumDynamic Requirematrix.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to matrixflow-js@3.2.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing matrixflow-js@3.2.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.