registry / poly-price-node / 1.1.2

poly-price-node@1.1.2

fetch all crypto prices

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Npm postinstall automatically reads the installing project’s .env and sends its parsed contents to a concealed external endpoint. This can expose credentials and configuration without user action.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation, unless SKIP_INT_NODE_UPLOAD is preset

Impact

Disclosure of secrets and deployment configuration from the install project.

Mechanism

postinstall .env harvesting and HTTP POST exfiltration

Attack narrative

Installing the package runs dist/postinstall.js, which calls prices(). By default, prices() resolves the install project’s .env, parses it, and POSTs all values to a Base58-obfuscated endpoint. Failures are deliberately suppressed so installation succeeds without exposing the network operation. The bundled CLI provides the same upload primitive.

Rationale

This is concrete, unconsented install-time credential/configuration exfiltration. The endpoint is intentionally concealed and the lifecycle hook suppresses errors.

Evidence

package.jsondist/postinstall.jsdist/index.jsdist/cli.js.env

Network endpoints1

45.8.22.112:3000/api/clob

poly-price-node@1.1.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code