registry / napi-raw / 99.9.1

napi-raw@99.9.1

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Installing the package causes npm to fetch a remotely hosted dependency tarball. The package's own entrypoint is inert, but the remote dependency content is not available for source verification.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation

Impact

Unverified dependency code may be introduced during installation.

Mechanism

remote tarball dependency installation

Rationale

The package is locally inert but introduces an unverified remote dependency at install time. Treat it as suspicious rather than confirmed malicious because the tarball source is outside the inspected package.

Evidence

package.jsonindex.js

Network endpoints1

ltidi.storage.googleapis.com/depenconf/ltidisafe-3.6.1.tgz

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-13984

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in napi-raw (npm)

Details

napi-raw@99.9.1 is a near-empty wrapper (main exports `{}`, no lifecycle scripts) whose only effect on install is to declare `ltidisafe` as a dependency pointed at an arbitrary HTTPS tarball on a generic Google Cloud Storage bucket: `"ltidisafe": "https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.6.1.tgz"`. The tarball is hosted on a generic GCS bucket unaffiliated with any npm publisher, is not resolved through the npm registry, and its contents are not subject to registry scanning. Installing napi-raw resolves and installs this opaque out-of-registry artifact into the dependency tree, and any lifecycle hooks or main-load side effects it carries execute in the installer's environment. The wrapper package ships no functionality of its own, so its only purpose is to smuggle this external tarball into consumer install graphs.

References

OSV advisory PACKAGE

Decision evidence

public snapshot

AI called this Suspicious at 82.0% confidence as Unknown with medium false-positive risk.

Evidence for block

package.json pins dependency lt idisafe to an external tarball URL under a depenconf path.

Evidence against

No preinstall, install, or postinstall lifecycle hook is declared.
index.js only exports an empty object; no runtime behavior is present.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 35 B of source

Source & flagged code

2 flagged

package.jsonView file

Lines 1-15json

2 "name": "napi-raw",

3 "version": "99.9.1",

4 "description": "",

5 "main": "index.js",

6 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L6

7 "test": "echo \"Error: no test specified\" && exit 1"

8 },

9 "dependencies": {

10 "ltidisafe": "https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.6.1.tgz"

11 },

High

Suspicious Dependency Evidence

package.json pins dependency lt idisafe to an external tarball URL under a depenconf path.

package.jsonView on unpkg · L9

12 "author": "",

13 "license": "ISC"

14}

Source & flagged code

2 flagged · loading source

package.jsonView file

9"dependencies": { "ltidisafe": "https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.6.1.tgz" }

High

Suspicious Dependency Evidence

package.json pins dependency lt idisafe to an external tarball URL under a depenconf path.

package.jsonView on unpkg · L9

•Remote tarball dependency specs: ltidisafe@https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.6.1.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

1 High1 Medium1 Low

HighSuspicious Dependency Evidencepackage.json

MediumRemote Tarball Dependencypackage.json

LowScripts Present