registry / npx-oob-package / 1.0.1

npx-oob-package@1.0.1

Minimal npx package that POSTs package name and whoami to an OOB callback

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Running the package CLI transmits the local account name, hostname, and platform to an external callback. The data collection is not needed to provide a visible user-facing function.

Static reason

One or more suspicious static signals were detected.

Trigger

Invoking the package through its CLI, including npx execution.

Impact

Exposes the executing user's account and device identity to a third-party endpoint.

Mechanism

Host identity collection followed by an outbound HTTP POST.

Attack narrative

The executable calls whoami, falls back to the operating system user information, and combines that value with hostname and platform data. It then posts those values to a hard-coded external Workers endpoint whenever the CLI runs. Although it has no install hook, this is concrete host-identification exfiltration on normal npx use.

Rationale

The package's only implemented behavior is collecting local identity data and posting it to a hard-coded external callback. The absence of an install hook limits the trigger but does not neutralize the confirmed exfiltration.

Evidence

cli.jspackage.json

Network endpoints1

oobme.kunalsharma0553.workers.dev/r/7bq6fz3l15r9

Decision evidence

public snapshot

AI called this at 98.0% confidence with false-positive risk.

npx-oob-package@1.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code