registry / pflag29424 / 1.0.0

pflag29424@1.0.0

AI Security Review

scanned 20d ago · by lpm-firewall-ai

The package exfiltrates profile response content to a third-party webhook when its main module is imported.

Static reason

No blocking static signals were detected.

Trigger

Importing or otherwise loading the package entry point.

Impact

Sensitive data available from the profile endpoint can be disclosed to an external party.

Mechanism

Fetches profile data and forwards a flag-like match or response excerpt to a webhook.

Attack narrative

A consumer that imports this package executes its entry module. The module reads the response from a profile endpoint, searches it for a flag-like value, and transmits either that value or the first 300 response characters to a webhook controlled outside the consumer environment.

AI rationale

The source contains a complete, import-triggered data-exfiltration path to an unrelated external webhook. This is concrete malicious behavior even though it has no install hook.

Evidence

index.jspackage.json

Network endpoints2

/profilewebhook.site/42c6d937-77c7-42a5-8678-ef06b4501e38

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-16342

Source

index.js (the package's declared main) unconditionally executes on module load: it calls fetch('/profile'), scans the response for a DGA{...} token, and sends either the matched token or the first 300 characters of the response as a query parameter to a hardcoded anonymous collector at https://webhook.site/42c6d937-77c7-42a5-8678-ef06b4501e38. The package has no README, no documented purpose, and a generic throwaway name; the sole effect of loading it is to relay content from the loading context to an attacker-controlled webhook.site endpoint. ## Source: ghsa-malware (cd211e848e5775cbc33c73e1f7a6a83bf8b42418e22b32479ba479fdd3430e85) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

pflag29424@1.0.0

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code