registry / Install hook abuse / raffaela-app

raffaela-app

Rafaela — AI agent de terminal (compilado, código protegido)

This report shows the evidence for raffaela-app@1.0.0, the only known version.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

This is an unconsented install-time remote-code execution chain: an opaque native payload is downloaded, persisted, and executed automatically. The visible source provides no integrity verification or payload source for review.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall invokes raffaela.js with --version.

Impact

An external host can supply code that executes with the installing user's privileges.

Mechanism

Downloads, chmods, and spawns an opaque remote native binary.

Attack narrative

On installation, the postinstall hook runs the launcher. If its cached binary is absent, the launcher downloads a platform-specific executable from raffaela.dev, writes it beneath the user's home directory, makes it executable, and launches it. The downloaded code is not included in the package for review, so the remote endpoint controls code executed during installation.

AI rationale

Evidence

package.jsonraffaela.js~/.raffaela/bin/raffaela-{darwin,linux}-{arm64,x64}

Network endpoints1

raffaela.dev/bin

Decision evidence

public snapshot

AI called this Malicious at 96.0% confidence as Malware with low false-positive risk.

Evidence for block

The postinstall hook automatically runs the launcher during package installation.
The launcher states that it downloads and executes a compiled binary whose source is unavailable.
It writes the downloaded platform binary into the user's home-directory cache and marks it executable.
It launches the downloaded binary with inherited terminal input and output.

Evidence against

The download host is a fixed HTTPS endpoint.
The visible JavaScript does not itself harvest credentials or exfiltrate files.

Behavioral surface

Source

ChildProcessFilesystemNetwork

Supply chain

UrlStrings

Manifest

NoLicense

scanned 1 file(s), 2.09 KB of source, external domains: raffaela.dev

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node raffaela.js --version

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

4scripts.postinstall = node raffaela.js --version Install-time code downloads an unverified remote native executable, stages it locally, activates an executable path, and exposes it to process execution. L4: L5: const { spawn } = require('child_process'); L6: const fs = require('fs'); ... L8: const path = require('path'); L9: const https = require('https'); L10: L11: const BIN_URL = 'https://raffaela.dev/bin'; L12: const VERSION = '1.1.8'; ... L27: L28: function getBinPath() { L29: const cacheDir = path.join(os.homedir(), '.raffaela', 'bin'); ... L35: return new Promise((resolve, reject) => {

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L4

11"scripts": { "postinstall": "node raffaela.js --version" }

High

Suspicious Lifecycle Evidence

The postinstall hook automatically runs the launcher during package installation.

package.jsonView on unpkg · L11

•scripts.postinstall = node raffaela.js --version

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

raffaela.jsView file

4L5: const { spawn } = require('child_process'); L6: const fs = require('fs'); ... L8: const path = require('path'); L9: const https = require('https'); L10: ... L28: function getBinPath() { L29: const cacheDir = path.join(os.homedir(), '.raffaela', 'bin'); L30: const binName = getPlatform(); ... L62: const url = `${BIN_URL}/${getPlatform()}`; L63: process.stderr.write(`⬇️ Baixando Raffaela ${VERSION}...\n`); L64: await download(url, binPath);

High

Remote System File Write

Source writes bytes from a remote response into a privileged operating-system path.

raffaela.jsView on unpkg · L4

1#!/usr/bin/env node // Raffaela CLI — thin launcher (downloads/executes compiled binary) // No source code exposed. Binary hosted on raffaela.dev.

High

Ai Review Evidence

The launcher states that it downloads and executes a compiled binary whose source is unavailable.

raffaela.jsView on unpkg · L1

28function getBinPath() { const cacheDir = path.join(os.homedir(), '.raffaela', 'bin'); const binName = getPlatform(); return path.join(cacheDir, binName); }

High

Ai Review Evidence

It writes the downloaded platform binary into the user's home-directory cache and marks it executable.

raffaela.jsView on unpkg · L28

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node raffaela.js --version

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L4

11"scripts": { "postinstall": "node raffaela.js --version" }

High

Suspicious Lifecycle Evidence

The postinstall hook automatically runs the launcher during package installation.

package.jsonView on unpkg · L11

•scripts.postinstall = node raffaela.js --version

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

raffaela.jsView file

High

Remote System File Write

Source writes bytes from a remote response into a privileged operating-system path.

raffaela.jsView on unpkg · L4

1#!/usr/bin/env node // Raffaela CLI — thin launcher (downloads/executes compiled binary) // No source code exposed. Binary hosted on raffaela.dev.

High

Ai Review Evidence

The launcher states that it downloads and executes a compiled binary whose source is unavailable.

raffaela.jsView on unpkg · L1

28function getBinPath() { const cacheDir = path.join(os.homedir(), '.raffaela', 'bin'); const binName = getPlatform(); return path.join(cacheDir, binName); }

High

Ai Review Evidence

It writes the downloaded platform binary into the user's home-directory cache and marks it executable.

raffaela.jsView on unpkg · L28

Findings

6 High2 Medium4 Low

HighInstall Time Lifecycle Scriptspackage.json

HighRemote System File Writeraffaela.js

HighUnverified Remote Native Payload Installpackage.json

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidenceraffaela.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

LowScripts Present

LowFilesystem

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to raffaela-app@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing raffaela-app@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-05 03:19:46.488Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

1.0.0latestshownMaliciousInstall Hook AbuseBlockPublishedSep 5, 2026, 3:16 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other install hook abuse packages

Related packages

Other install hook abuse packages

Source & flagged code