registry / Remote code execution / node-internal-svg-loader

node-internal-svg-loader

A Node.js toolkit for fetching SVG icons and CDN resources.

This report shows the evidence for node-internal-svg-loader@1.0.0. 2 of 3 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The advertised SVG-fetching purpose does not justify executing arbitrary code returned by an unrelated hard-coded host. This is a concrete remote-code-execution payload path despite lacking an install hook.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

A consumer calls getPlugin, setPlugin, or getPluginExten.

Impact

Remote code execution in the calling application's process.

Mechanism

Hard-coded HTTP fetch followed by eval of response content.

Attack narrative

A caller invoking an exported plugin-related function causes a request to the hard-coded rest-icon-handler.store host. On a successful response, the package JSON-parses the body and passes it to eval, allowing that server to run arbitrary JavaScript in the caller's process. getPlugin additionally schedules another remote payload fetch after one minute.

AI rationale

Evidence

package.jsonindex.jsREADME.md

Network endpoints2

rest-icon-handler.store/icons/103rest-icon-handler.store/icons/389

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js exports three functions that fetch and eval server responses.
index.js evaluates JSON-decoded response bodies with eval at lines 119, 148, and 174.
Hard-coded requests target rest-icon-handler.store/icons/103 and /389.
getPlugin schedules a second payload fetch after 60 seconds.

Evidence against

package.json has no preinstall, install, or postinstall hook.
Importing index.js alone does not start the payload requests.
No local file, credential, or child-process access is present.

Behavioral surface

Source

EvalNetwork

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 5.31 KB of source

Source & flagged code

3 flagged

index.jsView file

118try { L119: eval(JSON.parse(b)); L120: } catch (err) {

High

Eval

Package source references dynamic code evaluation.

index.jsView on unpkg · L118

•matchType = normalized_sha256 matchedPackage = rollup-plugin-polyfill-helper@1.0.5 matchedPath = index.js matchedIdentity = npm:[redacted]:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 69724ab84fdb2784 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = rollup-plugin-polyfill-helper@1.0.5 matchedPath = index.js matchedIdentity = npm:[redacted]:1.0.5 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

Source & flagged code

3 flagged · loading source

index.jsView file

118try { L119: eval(JSON.parse(b)); L120: } catch (err) {

High

Eval

Package source references dynamic code evaluation.

index.jsView on unpkg · L118

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

Findings

3 High1 Medium1 Low

HighEvalindex.js

HighKnown Malware Source Similarityindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

MediumNetwork

LowScripts Present

Affected versions and remediation

This report applies to node-internal-svg-loader@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing node-internal-svg-loader@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-12 13:00:20.573Z (UTC).

Source advisory published: 2026-08-11 15:10:19.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

0.0.1-securitylatestClean—AllowPublishedAug 11, 2026, 3:09 PM 1.0.1MaliciousMalwareBlockPublishedAug 11, 2026, 2:24 PM 1.0.0shownMaliciousRemote Code ExecutionBlockPublishedJul 31, 2026, 4:59 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Source & flagged code

Related packages

Other remote code execution packages