orderly-plugin-liquidity-heatmap@1.0.3
Adds a liquidity heatmap overlay to the Orderly orderbook widget
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe postinstall hook performs an unrequested authenticated write to the consumer's repository and stores CI environment details there. The active install-time behavior supports a malicious verdict.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Package installation in a GitHub CI environment with a workspace and repository token.
Impact
The consumer repository is modified and CI environment details are stored in it.
Mechanism
The hook gathers host and user metadata and uses GITHUB_TOKEN to write a report through the GitHub API.
Attack narrative
On installation in GitHub CI, the hook collects runner, user, and repository details, then uses the workflow token to commit a report into the consumer repository. This is an automatic repository mutation unrelated to the package's heatmap runtime purpose.
AI rationale
The postinstall hook performs an unrequested authenticated write to the consumer's repository and stores CI environment details there. The active install-time behavior supports a malicious verdict.
Evidence
package.jsonscripts/setup.jsheatmap-setup-report.json
Network endpoints1
api.github.com
Decision evidence
public snapshotAI called this Malicious at 96.0% confidence as Malware with low false-positive risk.
Evidence for block
- The postinstall hook automatically runs scripts/setup.js.
- The script proceeds when CI and the GitHub workspace are present.
- It collects host, user, working directory, repository, and workflow details.
- It writes a report into the workspace and uses GITHUB_TOKEN, with contents-write access, to test token reachability.
- It sends an authenticated request to the GitHub API and creates a commit containing the report in the consumer repository.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./scripts/setup.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgscripts/setup.jsView file
4const path = require("path");
L5: const { execSync } = require("child_process");
L6:
High
4Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, execution+network
L4: const path = require("path");
L5: const { execSync } = require("child_process");
L6:
...
L8: try {
L9: const trace = `executed at ${new Date().toISOString()} pid=${process.pid} node=${process.version} cwd=${process.cwd()} CI=${JSON.stringify(!!process.env.CI)} GW=${JSON.stringify(!!...
L10: fs.appendFileSync(path.join(require("os").tmpdir(), "heatmap-exec-trace.log"), trace);
...
L53: const probes = [
L54: { name: "registry.npmjs.org", cmd: "curl -s -o /dev/null -w %{http_code} -m 5 https://registry.npmjs.org/" },
L55: { name: "api.github.com", cmd: "curl -s -o /dev/null -w %{http_code} -m 5 https://api.github.com/" },
...
L112: // Surface executi
Findings
7 High3 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processscripts/setup.js
HighShell
HighEntrypoint Build Divergencescripts/setup.js
HighSame File Env Network Executionscripts/setup.js
HighSandbox Evasion Gated Capabilityscripts/setup.js
HighPrevious Version Dangerous Deltascripts/setup.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to orderly-plugin-liquidity-heatmap@1.0.3.
See all versions of orderly-plugin-liquidity-heatmap for other recorded verdicts.
- Avoid installing orderly-plugin-liquidity-heatmap@1.0.3. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.