Loading npm security reports…

nginxforge-panel@1.0.0: Malicious npm security report (Block) | LPM Firewall

registry / nginxforge-panel / 1.0.0

nginxforge-panel@1.0.0

Modern VPS Hosting Control Panel with Automated Nginx, Zero-Downtime Deployments, Let's Encrypt TLS, Multi-Tenant Database Management, and AI Copilot.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Installing the package in an interactive terminal launches a host-system installer automatically. It can install OS packages through sudo and enable Nginx or database services.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm, pnpm, or yarn installation with lifecycle scripts enabled in an interactive terminal.

Impact

The package can alter the consumer host and start persistent system services without an explicit setup command.

Mechanism

Postinstall-launched privileged system package installation and service activation.

Attack narrative

The postinstall lifecycle hook launches the system installer automatically on an interactive package install. The installer treats absent tools as selected by default, invokes the operating-system package manager through sudo when needed, and enables services such as Nginx, MariaDB, and PostgreSQL. This gives a package installation unexpected authority to modify the host and establish services.

Rationale

The package performs privileged, broad host mutation from an automatic npm lifecycle hook. Its interactive prompts do not make the initial install-time system setup an explicitly requested action.

Evidence

package.jsonscripts/postinstall.mjsscripts/system-installer.mjs

Decision evidence

public snapshot

AI called this Malicious at 96.0% confidence with false-positive risk.

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

15import express2 from "express"; L16: import { createServer } from "http"; L17: import net2 from "net"; ... L21: var ENV = { L22: appId: process.env.VITE_APP_ID ?? "", L23: cookieSecret: process.env.JWT_SECRET ?? "", ... L36: if (!key) { L37: res.status(400).send("Missing storage key"); L38: return; ... L53: if (!forgeResp.ok) { L54: const body = await forgeResp.text().catch(() => ""); L55: console.error(`[StorageProxy] forge error: ${forgeResp.status} ${body}`);

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L15

15import express2 from "express"; L16: import { createServer } from "http"; L17: import net2 from "net"; ... L21: var ENV = { L22: appId: process.env.VITE_APP_ID ?? "", L23: cookieSecret: process.env.JWT_SECRET ?? "", ... L36: if (!key) { L37: res.status(400).send("Missing storage key"); L38: return; ... L53: if (!forgeResp.ok) { L54: const body = await forgeResp.text().catch(() => ""); L55: console.error(`[StorageProxy] forge error: ${forgeResp.status} ${body}`);

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

dist/index.jsView on unpkg · L15

15Trigger-reachable chain: scripts.start -> dist/index.js L15: import express2 from "express"; L16: import { createServer } from "http"; L17: import net2 from "net"; ... L21: var ENV = { L22: appId: process.env.VITE_APP_ID ?? "", L23: cookieSecret: process.env.JWT_SECRET ?? "", ... L36: if (!key) { L37: res.status(400).send("Missing storage key"); L38: return; ... L53: if (!forgeResp.ok) { L54: const body = await forgeResp.text().catch(() => ""); L55: console.error(`[StorageProxy] forge error: ${forgeResp.status} ${body}`);

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L15

3662gitArgs.push(cleanUrl, tmpFolder); L3663: const { execFileSync: execFileSync10 } = await import("node:child_process"); L3664: execFileSync10("git", gitArgs, { timeout: 35e3 });

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L3662

9915// server/aiAgent.ts L9916: var execAsync = promisify2(exec); L9917: function viewFileTool(slug, filePath, startLine, endLine, customPath) {

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L9915

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: databaseUrl: process.env.DATABASE_URL ?? "", headers: { Authorization: `Bearer ${ENV.forgeApiKey}` } var buildEndpointUrl = (baseUrl) => { const normalizedBase = baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`; message: "Notification service API key is not configured." authorization: `Bearer ${ENV.forgeApiKey}`, "Authorization": `Bearer ${agent.token}` fs4.writeFileSync(certPath, customCert.trim() + "\n", "utf8");

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

23cookieSecret: process.env.JWT_SECRET ?? "", L24: databaseUrl: process.env.DATABASE_URL ?? "", L25: oAuthServerUrl: process.env.OAUTH_SERVER_URL ?? "", ... L3635: if (stat.size > 2 * 1024 * 1024) return null; L3636: return fsSync.readFileSync(fullPath, "utf-8"); L3637: } catch { ... L3662: gitArgs.push(cleanUrl, tmpFolder); L3663: const { execFileSync: execFileSync10 } = await import("node:child_process"); L3664: execFileSync10("git", gitArgs, { timeout: 35e3 });

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/index.jsView on unpkg · L23

15Trigger-reachable credential exfiltration chain: scripts.start -> dist/index.js L15: import express2 from "express"; L16: import { createServer } from "http"; L17: import net2 from "net"; ... L21: var ENV = { L22: appId: process.env.VITE_APP_ID ?? "", L23: cookieSecret: process.env.JWT_SECRET ?? "", ... L36: if (!key) { L37: res.status(400).send("Missing storage key"); L38: return; ... L53: if (!forgeResp.ok) { L54: const body = await forgeResp.text().catch(() => ""); L55: console.error(`[StorageProxy] forge error: ${forgeResp.status} ${body}`);

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.jsView on unpkg · L15

15Trigger-reachable persistence chain: scripts.start -> dist/index.js L15: import express2 from "express"; L16: import { createServer } from "http"; L17: import net2 from "net"; ... L21: var ENV = { L22: appId: process.env.VITE_APP_ID ?? "", L23: cookieSecret: process.env.JWT_SECRET ?? "", ... L36: if (!key) { L37: res.status(400).send("Missing storage key"); L38: return; ... L53: if (!forgeResp.ok) { L54: const body = await forgeResp.text().catch(() => ""); L55: console.error(`[StorageProxy] forge error: ${forgeResp.status} ${body}`);

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/index.jsView on unpkg · L15

•matchType = normalized_sha256 matchedPackage = nginxforge-panel@1.0.3 matchedPath = dist/index.js matchedIdentity = npm:bmdpbnhmb3JnZS1wYW5lbA:1.0.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

15import express2 from "express"; L16: import { createServer } from "http"; L17: import net2 from "net"; ... L21: var ENV = { L22: appId: process.env.VITE_APP_ID ?? "", L23: cookieSecret: process.env.JWT_SECRET ?? "", ... L36: if (!key) { L37: res.status(400).send("Missing storage key"); L38: return; ... L53: if (!forgeResp.ok) { L54: const body = await forgeResp.text().catch(() => ""); L55: console.error(`[StorageProxy] forge error: ${forgeResp.status} ${body}`);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L15

install.shView file

•path = install.sh kind = build_helper sizeBytes = 4263 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = nginxforge-panel@1.0.5 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:bmdpbnhmb3JnZS1wYW5lbA:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

scripts/system-installer.mjsView file

•matchType = normalized_sha256 matchedPackage = nginxforge-panel@1.0.5 matchedPath = scripts/system-installer.mjs matchedIdentity = npm:bmdpbnhmb3JnZS1wYW5lbA:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/system-installer.mjsView on unpkg

dist/public/assets/cytoscape.esm-DtBltrT8.jsView file

•matchType = normalized_sha256 matchedPackage = nginxforge-panel@1.0.5 matchedPath = dist/public/assets/cytoscape.esm-DtBltrT8.js matchedIdentity = npm:bmdpbnhmb3JnZS1wYW5lbA:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/public/assets/cytoscape.esm-DtBltrT8.jsView on unpkg

dist/public/assets/diagram-PSM6KHXK-DVKN-u96.jsView file

•matchType = normalized_sha256 matchedPackage = nginxforge-panel@1.0.5 matchedPath = dist/public/assets/diagram-PSM6KHXK-DVKN-u96.js matchedIdentity = npm:bmdpbnhmb3JnZS1wYW5lbA:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/public/assets/diagram-PSM6KHXK-DVKN-u96.jsView on unpkg

dist/public/assets/flowDiagram-NV44I4VS-mzGsMG3d.jsView file

•matchType = normalized_sha256 matchedPackage = nginxforge-panel@1.0.5 matchedPath = dist/public/assets/flowDiagram-NV44I4VS-mzGsMG3d.js matchedIdentity = npm:bmdpbnhmb3JnZS1wYW5lbA:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/public/assets/flowDiagram-NV44I4VS-mzGsMG3d.jsView on unpkg

Source & flagged code

19 flagged

package.jsonView file

Lines 20-60json

20 "license": "MIT",

21 "bin": {

22 "nginxforge": "./bin/nginxforge.mjs"

23 },

24 "files": [

25 "dist",

26 "bin",

27 "scripts",

28 "agent",

29 "shared",

30 "install.sh",

31 "package.json",

32 "README.md",

33 "LICENSE"

34 ],

35 "scripts": {

36 "dev": "NODE_ENV=development tsx watch server/_core/index.ts",

37 "build": "vite build && esbuild server/_core/index.ts --platform=node --packages=external --bundle --format=esm --outdir=dist",

38 "start": "NODE_ENV=production node dist/index.js",

39 "setup": "node scripts/system-installer.mjs",

40 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L40

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L40

41 "prepublishOnly": "pnpm build && pnpm release-check",

42 "check": "tsc --noEmit",

43 "format": "prettier --write .",

44 "test": "vitest run",

45 "release-check": "node scripts/release-check.mjs",

46 "db:push": "drizzle-kit generate && drizzle-kit migrate"

47 },

48 "dependencies": {

49 "@aws-sdk/client-s3": "^3.693.0",

50 "@aws-sdk/s3-request-presigner": "^3.693.0",

51 "@hookform/resolvers": "^5.2.2",

52 "@monaco-editor/react": "^4.7.0",

53 "@node-rs/argon2": "^2.1.0",

54 "@radix-ui/react-accordion": "^1.2.12",

55 "@radix-ui/react-alert-dialog": "^1.1.15",

56 "@radix-ui/react-aspect-ratio": "^1.1.7",

57 "@radix-ui/react-avatar": "^1.1.10",

58 "@radix-ui/react-checkbox": "^1.3.3",

59 "@radix-ui/react-collapsible": "^1.1.12",

60 "@radix-ui/react-context-menu": "^2.2.16",

dist/index.jsView file

15import express2 from "express"; L16: import { createServer } from "http"; L17: import net2 from "net"; ... L21: var ENV = { L22: appId: process.env.VITE_APP_ID ?? "", L23: cookieSecret: process.env.JWT_SECRET ?? "", ... L36: if (!key) { L37: res.status(400).send("Missing storage key"); L38: return; ... L53: if (!forgeResp.ok) { L54: const body = await forgeResp.text().catch(() => ""); L55: console.error(`[StorageProxy] forge error: ${forgeResp.status} ${body}`);

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L15

15import express2 from "express"; L16: import { createServer } from "http"; L17: import net2 from "net"; ... L21: var ENV = { L22: appId: process.env.VITE_APP_ID ?? "", L23: cookieSecret: process.env.JWT_SECRET ?? "", ... L36: if (!key) { L37: res.status(400).send("Missing storage key"); L38: return; ... L53: if (!forgeResp.ok) { L54: const body = await forgeResp.text().catch(() => ""); L55: console.error(`[StorageProxy] forge error: ${forgeResp.status} ${body}`);

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

dist/index.jsView on unpkg · L15

15Trigger-reachable chain: scripts.start -> dist/index.js L15: import express2 from "express"; L16: import { createServer } from "http"; L17: import net2 from "net"; ... L21: var ENV = { L22: appId: process.env.VITE_APP_ID ?? "", L23: cookieSecret: process.env.JWT_SECRET ?? "", ... L36: if (!key) { L37: res.status(400).send("Missing storage key"); L38: return; ... L53: if (!forgeResp.ok) { L54: const body = await forgeResp.text().catch(() => ""); L55: console.error(`[StorageProxy] forge error: ${forgeResp.status} ${body}`);

install.shView file

•path = install.sh kind = build_helper sizeBytes = 4263 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = nginxforge-panel@1.0.5 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:bmdpbnhmb3JnZS1wYW5lbA:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

scripts/system-installer.mjsView file

•matchType = normalized_sha256 matchedPackage = nginxforge-panel@1.0.5 matchedPath = scripts/system-installer.mjs matchedIdentity = npm:bmdpbnhmb3JnZS1wYW5lbA:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/system-installer.mjsView on unpkg

dist/public/assets/cytoscape.esm-DtBltrT8.jsView file

•matchType = normalized_sha256 matchedPackage = nginxforge-panel@1.0.5 matchedPath = dist/public/assets/cytoscape.esm-DtBltrT8.js matchedIdentity = npm:bmdpbnhmb3JnZS1wYW5lbA:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/public/assets/cytoscape.esm-DtBltrT8.jsView on unpkg

dist/public/assets/diagram-PSM6KHXK-DVKN-u96.jsView file

•matchType = normalized_sha256 matchedPackage = nginxforge-panel@1.0.5 matchedPath = dist/public/assets/diagram-PSM6KHXK-DVKN-u96.js matchedIdentity = npm:bmdpbnhmb3JnZS1wYW5lbA:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/public/assets/diagram-PSM6KHXK-DVKN-u96.jsView on unpkg

dist/public/assets/flowDiagram-NV44I4VS-mzGsMG3d.jsView file

•matchType = normalized_sha256 matchedPackage = nginxforge-panel@1.0.5 matchedPath = dist/public/assets/flowDiagram-NV44I4VS-mzGsMG3d.js matchedIdentity = npm:bmdpbnhmb3JnZS1wYW5lbA:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/public/assets/flowDiagram-NV44I4VS-mzGsMG3d.jsView on unpkg