registry / Credential exfiltration / native-frontend-orb
native-frontend-orb
This report shows the evidence for native-frontend-orb@1.1.17. 16 of 16 known versions are blocked or flagged. The newest version, 1.1.19, is blocked. See all versions.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThis is concrete, unconsented install-time execution of an obfuscated credential-stealing payload; the Bun bootstrap is used to ensure it runs. The legitimate-looking CI orb content does not explain or mitigate that behavior.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
npm install (preinstall)
Impact
The installer can expose GitHub credentials, environment secrets, and browser-derived data.
Mechanism
runtime bootstrap followed by obfuscated credential-harvesting exfiltration
Attack narrative
The preinstall hook runs setup.mjs, which installs or downloads Bun and executes math_init.js. That obfuscated payload enumerates local data sources, including environment values and GitHub-token paths, packages results, and uses HTTP requests to transmit them while suppressing errors and cleaning up.
AI rationale
This is concrete, unconsented install-time execution of an obfuscated credential-stealing payload; the Bun bootstrap is used to ensure it runs. The legitimate-looking CI orb content does not explain or mitigate that behavior.
Evidence
package.jsonsetup.mjsmath_init.js
Network endpoints1
github.com/oven-sh/bun/releases/download/bun-v1.3.13/
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json runs setup.mjs in preinstall.
- setup.mjs downloads Bun then executes math_init.js during install.
- math_init.js is a 728KB obfuscated executable payload.
- math_init.js collects process environment and local browser/profile data.
- math_init.js discovers GitHub tokens and sends collected data through HTTP clients.
- Payload suppresses failures and removes its temporary marker.
Evidence against
- README and src/ contain ordinary CircleCI orb configuration, unrelated to the install payload.
Behavioral surface
ChildProcessEvalFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node setup.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgmath_init.jsView file
1// @bun @bun-cjs
L2: var MmgoCP,etDiOOB,JqTtnbZ,bc3Kak,ZQmUTyQ,TTUgga,MDX6yrw,h8wMJNB,CabwE2L,x5ErqV;function WV8StW(MmgoCP,etDiOOB,JqTtnbZ){for(JqTtnbZ=0x0;JqTtnbZ<etDiOOB;JqTtnbZ++)MmgoCP.push(MmgoCP...
Low
Eval
Package source references a known benign dynamic code generation pattern.
math_init.jsView on unpkg · L1scripts/orb-pack.shView file
•path = scripts/orb-pack.sh
kind = build_helper
sizeBytes = 161
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
scripts/orb-pack.shView on unpkgsetup.mjsView file
•matchType = normalized_sha256
matchedPackage = native-frontend-orb@1.1.16
matchedPath = setup.mjs
matchedIdentity = npm:bmF0aXZlLWZyb250ZW5kLW9yYg:1.1.16
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
setup.mjsView on unpkg•matchType = malicious_source_fingerprint_signature
signature = 04ba21a16d3a5a3a
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = native-frontend-orb@1.1.16
matchedPath = setup.mjs
matchedIdentity = npm:bmF0aXZlLWZyb250ZW5kLW9yYg:1.1.16
similarity = 1.000
shingleOverlap = 2
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
setup.mjsView on unpkgFindings
3 High3 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similaritysetup.mjs
HighKnown Malware Source Fingerprint Signaturesetup.mjs
MediumNetwork
MediumShips Build Helperscripts/orb-pack.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalmath_init.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to native-frontend-orb@1.1.17.
The versions list below shows the verdict for each recorded version.
- Avoid installing native-frontend-orb@1.1.17. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
16 known versions1.1.19latestMaliciousMalwareBlockPublishedAug 4, 2026, 12:46 PM1.1.18MaliciousMalwareBlockPublishedAug 4, 2026, 12:46 PM1.1.17shownMaliciousCredential ExfiltrationBlockPublishedAug 4, 2026, 12:46 PM1.1.16MaliciousCredential ExfiltrationBlockPublishedAug 4, 2026, 12:45 PM1.1.15MaliciousMalwareBlockPublishedAug 4, 2026, 12:45 PM1.1.14MaliciousMalwareBlockPublishedAug 4, 2026, 12:44 PM1.1.13MaliciousMalwareBlockPublishedAug 4, 2026, 12:44 PM1.1.12MaliciousMalwareBlockPublishedAug 4, 2026, 12:44 PM1.1.11MaliciousCredential ExfiltrationBlockPublishedAug 4, 2026, 11:40 AM1.1.10MaliciousMalwareBlockPublishedAug 4, 2026, 11:16 AM1.1.9MaliciousCredential ExfiltrationBlockPublishedAug 4, 2026, 11:16 AM1.1.8MaliciousMalwareBlockPublishedAug 4, 2026, 10:44 AM1.1.7MaliciousMalwareBlockPublishedAug 4, 2026, 10:44 AM1.1.6MaliciousMalwareBlockPublishedAug 4, 2026, 10:19 AM1.1.5MaliciousMalwareBlockPublishedAug 4, 2026, 10:19 AM1.1.4MaliciousRemote Code ExecutionBlockPublishedAug 4, 2026, 10:19 AM