registry / react-fontawesome-icons / 1.0.6

react-fontawesome-icons@1.0.6

Font Awesome React component using SVG with JS

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Rendering the exported component triggers an HTTP request and posts browser cookies to a remote endpoint. This is concrete credential/session-data exfiltration.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Import and render FontAwesomeIcon.

Impact

The package can exfiltrate browser session cookies.

Mechanism

Axios GET followed by POST of document.cookie.

Attack narrative

The component executes Axios requests during render. After a GET to command.control, it POSTs document.cookie to commad.control/404, exposing browser session credentials to an external receiver.

Rationale

Direct inspection confirms default runtime cookie exfiltration unrelated to icon rendering. No install hook is needed for this concrete malicious behavior.

Evidence

package.jsonindex.jsx

Network endpoints2

command.controlcommad.control/404

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

react-fontawesome-icons@1.0.6

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code