registry / AI-agent capability abuse / moidevu
moidevu
High-performance DOM utility and diagnostic bridge for modern web applications.
This report shows the evidence for moidevu@1.0.0, the only known version.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is deliberately disguised, persistent proctor-evasion software that captures exam content and automates AI answers. The harmless install hook does not mitigate the concrete malicious runtime behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
A user runs the moidevu command.
Impact
Enables covert exam cheating, disguises and respawns its process, and includes browser-session credential harvesting capability.
Mechanism
Hidden persistent proctor-evasion overlay that captures questions and automates AI responses.
Policy narrative
Running the CLI detaches a watchdog that disguises Electron as SearchApp.exe and relaunches it after termination. The app hides its overlay from capture tools, specifically detects proctoring software, and moves to monitored desktops. User-triggered controls capture the foreground window through UI automation or screen capture, then inject the captured question into a hidden ChatGPT session and returns the answer. A separate bundled script can decrypt OpenAI and ChatGPT browser cookies, although the inspected application source does not call that script.
AI rationale
This is deliberately disguised, persistent proctor-evasion software that captures exam content and automates AI answers. The harmless install hook does not mitigate the concrete malicious runtime behavior.
Evidence
package.jsonbin/kalamasha-tool.jsmain.jsbin/stealth_capture.ps1bin/uia_extract.pybin/chrome_cookies.ps1bin/uia_extract.execonfig.json
Network endpoints4
chatgpt.comchat.openai.comclaude.aigemini.google.com
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The command-line launcher detaches into the background and respawns the application after termination.
- It copies Electron to the misleading name SearchApp.exe.
- The Electron app hides itself from screen capture and detects core.exe to temporarily disable that protection.
- It extracts text from the foreground exam window and runs a PowerShell screen-capture helper.
- It programmatically inserts captured content into ChatGPT and sends it.
- A bundled PowerShell script decrypts browser cookies for OpenAI and ChatGPT domains.
Evidence against
- The postinstall hook only attempts to require Electron and does not launch the application.
- No hard-coded external command-and-control or data-exfiltration endpoint was found.
- The cookie-extraction script is bundled but no invocation of it was found in the inspected JavaScript source.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNativeBindingsShell
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "try{require('electron')}catch(e){console.log('Electron will download on first run.')}"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "try{require('electron')}catch(e){console.log('Electron will download on first run.')}"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/kalamasha-tool.jsView file
2L3: const { spawn, execSync } = require('child_process');
L4: const path = require('path');
High
Child Process
Package source references child process execution.
bin/kalamasha-tool.jsView on unpkg · L2Findings
1 Critical8 High4 Medium4 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/kalamasha-tool.js
HighShellmain.js
HighCross File Remote Execution Contextbin/kalamasha-tool.js
HighRuntime Package Installbin/kalamasha-tool.js
HighKnown Malware Source Similaritymain.js
HighKnown Malware Source Similaritybin/kalamasha-tool.js
HighKnown Malware Source Fingerprint Signaturemain.js
MediumEnvironment Vars
MediumShips Native Binarybin/uia_extract.exe
MediumShips Build Helperbin/chrome_cookies.ps1
Affected versions and remediation
This report applies to moidevu@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing moidevu@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.