registry / Data exfiltration / moidevy
moidevy
High-performance DOM utility and diagnostic bridge for modern web applications.
This report shows the evidence for moidevy@1.0.0, the only known version.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiSource directly implements concealed capture, AI-assisted submission, proctor evasion, and respawning persistence under a misleading diagnostic description. The install hook itself is inert, but the user-invoked payload is concrete malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
User runs the moidevy CLI or starts its Electron app.
Impact
Exfiltrates captured application/exam content to ChatGPT and defeats monitoring controls.
Mechanism
Stealth screen/UI capture, AI submission, proctor evasion, and watchdog persistence.
Attack narrative
When a user launches the package, its detached watchdog starts Electron and respawns it after termination. The app captures the foreground window as an image or extracts its UI text, then injects that material into a concealed ChatGPT session. Native window settings, capture exclusion, process checks, and Testpad-specific logic are used to hide the workflow and evade proctoring detection.
AI rationale
Source directly implements concealed capture, AI-assisted submission, proctor evasion, and respawning persistence under a misleading diagnostic description. The install hook itself is inert, but the user-invoked payload is concrete malicious behavior.
Evidence
package.jsonmain.jsbin/kalamasha-tool.jsbin/stealth_capture.ps1bin/uia_extract.pybin/uia_extract.exe%LOCALAPPDATA%/Microsoft/Windows/Diagnostics/boot.log%LOCALAPPDATA%/Microsoft/Windows/Diagnostics/.kill_watchdog
Network endpoints2
chatgpt.com/?model=autochat.openai.com
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- Runtime captures the foreground window and queues its image data.
- Runtime extracts text from another foreground application through UI Automation.
- Captured questions are injected and sent to ChatGPT.
- Code hides the overlay from capture and explicitly evades proctor detection.
- CLI creates a detached watchdog that respawns the Electron payload.
Evidence against
- The postinstall hook only attempts to require Electron and does not launch the payload.
- No source-confirmed network destination beyond the AI services used by the runtime workflow.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNativeBindingsShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "try{require('electron')}catch(e){console.log('Electron will download on first run.')}"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "try{require('electron')}catch(e){console.log('Electron will download on first run.')}"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/kalamasha-tool.jsView file
2L3: const { spawn, execSync } = require('child_process');
L4: const path = require('path');
High
Child Process
Package source references child process execution.
bin/kalamasha-tool.jsView on unpkg · L2Findings
1 Critical8 High4 Medium4 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/kalamasha-tool.js
HighShellmain.js
HighCross File Remote Execution Contextbin/kalamasha-tool.js
HighRuntime Package Installbin/kalamasha-tool.js
HighKnown Malware Source Similaritymain.js
HighKnown Malware Source Similaritybin/kalamasha-tool.js
HighKnown Malware Source Fingerprint Signaturemain.js
MediumEnvironment Vars
MediumShips Native Binarybin/uia_extract.exe
MediumShips Build Helperbin/chrome_cookies.ps1
Affected versions and remediation
This report applies to moidevy@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing moidevy@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.