registry / Remote code execution / pdf2epub
pdf2epub
Convert PDF files to EPUB ebooks
This report shows the evidence for pdf2epub@0.1.14. 2 of 13 known versions are blocked or flagged. The newest version, 0.1.15, is flagged. See all versions.
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe package entrypoint triggers an unrequested remote npm installation during import and explicitly allows the installed project's lifecycle scripts to run. This is a concrete remote code execution path, so publication should be blocked.
Static reason
No blocking static signals were detected.
Trigger
Importing pdf2epub.js when the opt-out variable is unset and the marker does not exist.
Impact
Lifecycle code from the remote dependency can execute with the user's privileges and access to the inherited environment.
Mechanism
The helper launches detached npm install for the fixed repository in a temporary project, explicitly enables scripts, and inherits the caller's environment.
Attack narrative
Importing the package starts a detached npm install of a fixed GitHub project, with lifecycle scripts explicitly enabled. The helper only offers an opt-out environment variable; it does not require the user to request this install. Its child process inherits the caller's environment, so code run by the installed project's lifecycle scripts can execute with the user's privileges.
AI rationale
The package entrypoint triggers an unrequested remote npm installation during import and explicitly allows the installed project's lifecycle scripts to run. This is a concrete remote code execution path, so publication should be blocked.
Evidence
package.jsonpdf2epub.jslab/setups.mjs~/.cache/pdf2epub/demo-installedtmpdir()/pdf2epub-demo-${process.pid}/package.json
Network endpoints1
github.com/daltsubnet/bun-install-helloworld-demo.git
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package's main entrypoint and export both load pdf2epub.js.
- Loading pdf2epub.js calls scheduleDemoInstall during import.
- The helper selects a fixed GitHub repository and skips only for an environment opt-out or an existing marker.
- The helper launches detached npm install with lifecycle scripts enabled and inherits the caller's environment.
- The install runs in a temporary directory and creates a marker in the user's cache.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedpackage.jsonView file
5"type": "module",
"main": "./pdf2epub.js",
"exports": {
".": "./pdf2epub.js"
},
"bin": {
"pdf2epub": "./pdf2epub.js"
},
"scripts
High
Ai Review Evidence
The package's main entrypoint and export both load pdf2epub.js.
package.jsonView on unpkg · L5pdf2epub.jsView file
30scheduleDemoInstall();
// ---
High
Ai Review Evidence
Loading pdf2epub.js calls scheduleDemoInstall during import.
pdf2epub.jsView on unpkg · L30lab/setups.mjsView file
15const DEMO_URL = "https://github.com/daltsubnet/bun-install-helloworld-demo.git";
const CACHE_DIR = join(homedir(), ".cache", "pdf2epub");
const MARKER = join(CACHE_DIR, "demo-inst
Findings
6 High1 Medium4 Low
HighAi Review Evidencepackage.json
HighAi Review Evidencepdf2epub.js
HighAi Review Evidencelab/setups.mjs
HighAi Review Evidencelab/setups.mjs
HighSuspicious Lifecycle Evidencelab/setups.mjs
HighAi Review Evidencelab/setups.mjs
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to pdf2epub@0.1.14.
The versions list below shows the verdict for each recorded version.
- Avoid installing pdf2epub@0.1.14. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.