muaddib-scanner: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

muaddib-scanner: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

16 flagged · loading source

src/sandbox/index.jsView file

207patternName = github_pat severity = critical line = 207 matchedText = GITHUB_T...gK',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/sandbox/index.jsView on unpkg · L207

207patternName = github_pat severity = critical line = 207 matchedText = GITHUB_T...gK',

Critical

Secret Pattern

GitHub personal access token in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L207

208patternName = npm_token severity = critical line = 208 matchedText = NPM_TOKE...5e',

Critical

Secret Pattern

npm access token in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L208

209patternName = aws_access_key severity = critical line = 209 matchedText = AWS_ACCE...Q3',

Critical

Secret Pattern

AWS access key ID in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L209

bin/muaddib.jsView file

25if (!hasMaxOld || !hasGC) { L26: const { execFileSync } = require('child_process'); L27: const flags = [];

High

Child Process

Package source references child process execution.

bin/muaddib.jsView on unpkg · L25

15Cross-file remote execution chain: bin/muaddib.js spawns src/rules/index.js; helper contains network access plus dynamic code execution. L15: * You should have received a copy of the GNU Affero General Public License L16: * along with this program. If not, see <https://www.gnu.org/licenses/>. L17: * ... L22: if (process.argv[2] === 'evaluate') { L23: const hasMaxOld = process.execArgv.some(a => a.includes('--max-old-space-size')); L24: const hasGC = process.execArgv.some(a => a === '--expose-gc'); ... L32: stdio: 'inherit', L33: env: process.env L34: }); ... L47: const { loadDotEnv } = require('../src/env-loader.js'); L48: loadDotEnv(require('path').join(__dirname, '..', '.env')); L49: } catch { /* non-fatal: .env is optional */ }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/muaddib.jsView on unpkg · L15

25if (!hasMaxOld || !hasGC) { L26: const { execFileSync } = require('child_process'); L27: const flags = [];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/muaddib.jsView on unpkg · L25

src/response/playbooks.jsView file

14* You should have received a copy of the GNU Affero General Public License L15: * along with this program. If not, see <https://www.gnu.org/licenses/>. L16: * ... L32: L33: child_process: L34: 'Execution de commandes systeme. Verifier quelles commandes sont lancees.', ... L50: L51: base64_encoding: L52: 'Encodage base64 detecte. Souvent utilise pour obfusquer du code malveillant.', ... L96: env_proxy_intercept: L97: 'CRITIQUE: new Proxy(process.env) intercepte tous les acces aux variables d\'environnement. Technique d\'exfiltration silencieuse. Isoler la machine, regenerer tous les secrets.', L98:

Critical

Npm Publish Worm

Source mutates package metadata and republishes itself to npm.

src/response/playbooks.jsView on unpkg · L14

251sh_c_curl_exec: L252: 'sh -c wrapping autour de curl detecte. Technique d\'evasion pour masquer l\'execution de commandes distantes. Analyser le contenu telecharge.', L253:

High

Shell

Package source references shell execution.

src/response/playbooks.jsView on unpkg · L251

src/scoring.jsView file

440'cross_file_dataflow', // credential read → network exfil across files L441: 'staged_eval_decode', // eval(atob(...)) (explicit payload staging) L442: 'reverse_shell', // net.Socket + connect + pipe (always malicious)

High

Eval

Package source references dynamic code evaluation.

src/scoring.jsView on unpkg · L440

src/rules/index.jsView file

14* You should have received a copy of the GNU Affero General Public License L15: * along with this program. If not, see <https://www.gnu.org/licenses/>. L16: * ... L109: domain: 'vulnerability', L110: description: 'Utilisation de eval() ou new Function() - execution de code dynamique', L111: references: [ ... L161: domain: 'malware', L162: description: 'Script preinstall/postinstall suspect dans package.json', L163: references: [ ... L316: }, L317: import_time_base64_exec: { L318: id: 'MUADDIB-PYSRC-005',

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

src/rules/index.jsView on unpkg · L14

14Trigger-reachable chain: manifest.main -> src/index.js -> src/scoring.js -> src/rules/index.js L14: * You should have received a copy of the GNU Affero General Public License L15: * along with this program. If not, see <https://www.gnu.org/licenses/>. L16: * ... L109: domain: 'vulnerability', L110: description: 'Utilisation de eval() ou new Function() - execution de code dynamique', L111: references: [ ... L161: domain: 'malware', L162: description: 'Script preinstall/postinstall suspect dans package.json', L163: references: [ ... L316: }, L317: import_time_base64_exec: { L318: id: 'MUADDIB-PYSRC-005',

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/rules/index.jsView on unpkg · L14

14* You should have received a copy of the GNU Affero General Public License L15: * along with this program. If not, see <https://www.gnu.org/licenses/>. L16: * ... L109: domain: 'vulnerability', L110: description: 'Utilisation de eval() ou new Function() - execution de code dynamique', L111: references: [ ... L161: domain: 'malware', L162: description: 'Script preinstall/postinstall suspect dans package.json', L163: references: [ ... L316: }, L317: import_time_base64_exec: { L318: id: 'MUADDIB-PYSRC-005',

src/vendor/tree-sitter-python.wasmView file

•path = src/vendor/tree-sitter-python.wasm kind = wasm_module sizeBytes = 459862 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/vendor/tree-sitter-python.wasmView on unpkg

src/scanner/ast-detectors/anti-evasion.jsView file

55patternName = aws_access_key severity = critical line = 55 matchedText = // (AKIA...able

Critical

Secret Pattern

AWS access key ID in src/scanner/ast-detectors/anti-evasion.js

src/scanner/ast-detectors/anti-evasion.jsView on unpkg · L55

Source & flagged code

16 flagged

src/sandbox/index.jsView file

Lines 187-227javascript

187 'googleapis.com',

188 'cloudflare.com'

189];

190

191// IPs/ports excluded from connection findings (false positives)

192const SAFE_IPS = ['127.0.0.1'];

193const PROBE_PORTS = [65535]; // Node.js internal connectivity checks

194

195// Commands that are always suspicious in a sandbox

196const DANGEROUS_CMDS = ['curl', 'wget', 'nc', 'netcat', 'python', 'python3', 'bash', 'sh'];

197

198// Commands that are sandbox infrastructure — not spawned by the package

199const SAFE_SANDBOX_CMDS = new Set(['timeout', 'node', 'npm', 'npx', 'su', 'env']);

200

201// Static canary tokens injected by sandbox-runner.sh (fallback honeypots).

202// These are searched in the sandbox report as a complement to the dynamic

203// tokens from canary-tokens.js (which use random values per session).

204// Format-valid: match real service token formats to resist format-based detection.

205// ANSSI audit m4: replaced AWS doc examples with project-specific values.

206const STATIC_CANARY_TOKENS = {

207 GITHUB_TOKEN: 'ghp_mD9kX3pL7vR1wN5qT8yB2cF4hJ6sA0eU3iO9gK',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/sandbox/index.jsView on unpkg · L207

208 NPM_TOKEN: 'npm_7f3e8a2d1b9c4f6e0d5a7b3c8f1e2d4a9b6c0d5e',

209 AWS_ACCESS_KEY_ID: 'AKIAMDB7X9R2K4P1N5Q3',

210 AWS_SECRET_ACCESS_KEY: 'mDb8xR3kP7vN2qT5yW1cF9hJ4sA6eU0iO3gK7nL',

211 SLACK_WEBHOOK_URL: 'https://hooks.example.com/services/TCANARY/BCANARY/canary-slack-token',

212 DISCORD_WEBHOOK_URL: 'https://discord.com/api/webhooks/000000000000000000/abcdefghijklmnopqrstuvwxyz'

213};

214

215// Patterns indicating data exfiltration in HTTP bodies

216const EXFIL_PATTERNS = [

217 { pattern: /\bNPM_TOKEN\b/i, label: 'npm token', severity: 'CRITICAL' },

218 { pattern: /\bGITHUB_TOKEN\b/i, label: 'GitHub token', severity: 'CRITICAL' },

219 { pattern: /\bAWS_SECRET/i, label: 'AWS credentials', severity: 'CRITICAL' },

220 { pattern: /npmrc/i, label: '.npmrc content', severity: 'CRITICAL' },

221 { pattern: /\bssh-rsa\b|\bssh-ed25519\b/i, label: 'SSH key', severity: 'CRITICAL' },

222 { pattern: /BEGIN (RSA |EC |DSA |OPENSSH )?PRIVATE KEY/, label: 'private key', severity: 'CRITICAL' },

223 { pattern: /\bpassword\b/i, label: 'password', severity: 'CRITICAL' },

224 { pattern: /\btoken\b/i, label: 'token', severity: 'CRITICAL' },

225 { pattern: /\/etc\/passwd/, label: 'passwd file', severity: 'HIGH' },

226 { pattern: /\.env\b/, label: '.env content', severity: 'HIGH' }

227];

207patternName = github_pat severity = critical line = 207 matchedText = GITHUB_T...gK',

Critical

Secret Pattern

GitHub personal access token in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L207

208patternName = npm_token severity = critical line = 208 matchedText = NPM_TOKE...5e',

Critical

Secret Pattern

npm access token in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L208

209patternName = aws_access_key severity = critical line = 209 matchedText = AWS_ACCE...Q3',

Critical

Secret Pattern

AWS access key ID in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L209

bin/muaddib.jsView file

Lines 5-45javascript

5 *

6 * This program is free software: you can redistribute it and/or modify

7 * it under the terms of the GNU Affero General Public License version 3,

8 * as published

src/response/playbooks.jsView file

Lines 1-34javascript

1/*

2 * MUAD'DIB — Supply-chain threat detection for npm & PyPI

3 * Copyright (C) 2026 DNSZLSK

4 *

5 * This program is free software: you can redistribute it and/or modify

6 * it under the terms of the GNU Affero General Public License version 3,

7 * as published by the Free Software Foundation.

8 *

9 * This program is distributed in the hope that it will be useful,

10 * but WITHOUT ANY WARRANTY; without even the implied warranty of

src/scoring.jsView file

Lines 420-460javascript

420 // as part of their core functionality. Lowered from 10→5 for env_access count threshold.

421 // The B5 network_sink_immunity above protects genuine exfiltration scenarios.

422 sensitive_string: { maxCount: 5, to: 'LOW' },

423 // Audit v3 B3: Template engines (htmx, marko) with many staged_payload hits are using

424 // fetch+eval for dynamic content loading, not payload staging. fetch_decrypt_exec (triple

src/rules/index.jsView file

Lines 1-34javascript

1/*

2 * MUAD'DIB — Supply-chain threat detection for npm & PyPI

3 * Copyright (C) 2026 DNSZLSK

4 *

5 * This program is free software: you can redistribute it and/or modify

6 * it under the terms of the GNU Affero General Public License version 3,

7 * as published by the Free Software Foundation.

8 *

9 * This program is distributed in the hope that it will be useful,

10 * but WITHOUT ANY WARRANTY; without even the implied warranty of

11

src/vendor/tree-sitter-python.wasmView file

•path = src/vendor/tree-sitter-python.wasm kind = wasm_module sizeBytes = 459862 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/vendor/tree-sitter-python.wasmView on unpkg

src/scanner/ast-detectors/anti-evasion.jsView file

55patternName = aws_access_key severity = critical line = 55 matchedText = // (AKIA...able

Critical

Secret Pattern

AWS access key ID in src/scanner/ast-detectors/anti-evasion.js

src/scanner/ast-detectors/anti-evasion.jsView on unpkg · L55

Lines 231-271javascript

231 perl_reverse_shell:

232 'CRITIQUE: Reverse shell Perl detecte. Machine potentiellement compromise. Isoler immediatement.',

233 fifo_reverse_shell:

234 'CRITIQUE: Reverse shell FIFO/named pipe detecte. Machine potentiellement compromise. Isoler immediatement.',

235

236 fifo_nc_reverse_shell:

237 'CRITIQUE: Reverse shell via mkfifo + netcat detecte. Machine potentiellement compromise. Isoler immediatement. Verifier les connexions sortantes actives.',

238

239 base64_decode_exec:

240 'CRITIQUE: Payload encode en base64 pipe vers un shell. Decoder le payload pour analyse: echo "<payload>" | base64 -d. Isoler la machine si deja execute.',

241

242 wget_base64_decode:

243 'Telechargement + decodage base64 detecte. Verifier l\'URL de telechargement et decoder le contenu. Pattern de staging malveillant en deux etapes.',

244

245 curl_ifs_evasion:

246 'CRITIQUE: Evasion IFS detectee — curl$IFS ou curl${IFS} pipe vers shell. Technique d\'evasion pour contourner la detection de "curl|sh". Ne pas installer.',

247

248 eval_curl_subshell:

249 'CRITIQUE: eval $(curl ...) detecte. Telecharge et execute du code distant via command substitution. Ne pas installer.',

250

251 sh_c_curl_exec:

252 'sh -c wrapping autour de curl detecte. Technique d\'evasion pour masquer l\'execution de commandes distantes. Analyser le contenu telecharge.',

253

High

Shell

Package source references shell execution.

src/response/playbooks.jsView on unpkg · L251

254 python_time_delay_exec:

255 'ELEVE: Execution Python avec delai time.sleep() important detectee. ' +

256 'Technique d\'evasion sandbox (T1497.003) : le malware attend l\'expiration du timeout sandbox avant d\'executer le payload. ' +

257 'Verifier le code Python execute et les connexions reseau post-delai.',

258

259 shai_hulud_backdoor:

260 'CRITIQUE: Backdoor Shai-Hulud dans GitHub Actions. Supprimer le workflow et auditer les runs precedents.',

261

262 workflow_injection:

263 'Injection potentielle dans GitHub Actions via input non sanitise sur self-hosted runner. Supprimer ou corriger le workflow.',

264

265 workflow_pwn_request:

266 'CRITIQUE: Pwn request detecte — pull_request_target avec checkout du head de la PR permet l\'execution de code arbitraire. Remplacer par pull_request ou utiliser une strategie de checkout securisee (base ref uniquement).',

267

268 workflow_secrets_dump:

269 'CRITIQUE: Workflow GitHub Actions utilise toJSON(secrets) pour dumper tous les secrets du repository. ' +

270 'Technique Shai-Hulud (TeamPCP). Supprimer le workflow immediatement. ' +

271 'Si le workflow a ete execute, considerer tous les secrets du repository compromis et les regenerer.',