registry / mkb-manager / 1.0.13

mkb-manager@1.0.13

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Importing the package reads and returns an embedded encrypted payload. No execution or exfiltration path was confirmed.

Static reason

No blocking static signals were detected.

Trigger

Consumer imports mkb-manager.

Impact

An inert staged payload is exposed to consuming code; the package itself shows no active attack behavior.

Mechanism

Runtime export of an encrypted embedded blob

Rationale

The package has no install hook or observed active malicious behavior, but its public API exposes an unexplained encrypted blob. Treat it as suspicious until the payload’s legitimate purpose is established.

Evidence

package.jsonindex.jsapps/docs/app/theta.jsapps/docs/app/des.db

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-14490

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in mkb-manager (npm)

Details

The package was found to contain malicious code or consuming dependency that contains malicious code ## Source: ghsa-malware (299f162cc2ff57788cc4ebadedda746bfd504ac2a63fb53a3789a53c2e1881c9) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

References

OSV advisory ADVISORY PACKAGE PACKAGE PACKAGE PACKAGE PACKAGE PACKAGE

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Unknown with medium false-positive risk.

Evidence for block

The public entrypoint exports a value sourced from an embedded encrypted database.
The imported payload file is an 18,456-byte OpenSSL-encrypted, base64-encoded blob.
No decryption, execution, network transmission, or stated package function explains exporting this payload.

Evidence against

Root manifest has no preinstall, install, or postinstall hook.
Inspected source contains no child-process use, dynamic evaluation, network client, credential harvesting, or file writes.
The encrypted blob is read only when the package is imported; it is not executed by package code.

Behavioral surface

Source

Filesystem

Supply chain

UrlStrings

Manifest

NoLicense

scanned 15 file(s), 7.78 KB of source, external domains: github.com

Source & flagged code

1 flagged

index.jsView file

1export { desKey } from "./apps/docs/app/theta.js";

High

Ai Review Evidence

The public entrypoint exports a value sourced from an embedded encrypted database.

index.jsView on unpkg · L1

Source & flagged code

1 flagged · loading source

index.jsView file

1export { desKey } from "./apps/docs/app/theta.js";

High

Ai Review Evidence

The public entrypoint exports a value sourced from an embedded encrypted database.

index.jsView on unpkg · L1

Findings

1 High4 Low

HighAi Review Evidenceindex.js

LowScripts Present

LowFilesystem

LowUrl Strings

LowNo License