registry / Destructive action / react-photo-frame

react-photo-frame

Give it a frame design and a photo, and it draws the photo inside the frame's border on a canvas, then hands back the combined image as a data URL.

This report shows the evidence for react-photo-frame@3.0.6. 2 of 4 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package hides a remotely controlled kill switch in a photo-frame component and destroys the consumer page when its remote licence decision is negative. There is no install-time execution, but the concrete runtime destructive behavior warrants blocking.

Static reason

One or more suspicious static signals were detected.

Trigger

Render the PhotoFrame component with an invalid or remotely revoked licence on a non-localhost site.

Impact

The host web application is removed from the page.

Mechanism

Remote revocation check followed by document-body replacement.

Attack narrative

Importing and rendering the component starts licence verification. For a signed licence, the code obtains a remote revocation list and caches the result. If verification returns invalid and the hostname is not localhost, the component replaces the document's existing body with a new empty body. The endpoint can therefore remotely cause deployed consumer applications using the component to disappear.

AI rationale

Evidence

index.jsdocument.documentElement

Network endpoints1

api.npoint.io/f63d2269d3d045f8cdc3

Decision evidence

public snapshot

AI called this Malicious at 96.0% confidence as Malware with low false-positive risk.

Evidence for block

The sole runtime file is deliberately obfuscated, concealing unrelated licence and revocation logic.
When the component mounts, it fetches a remotely controlled revocation list from api.npoint.io.
If the licence is invalid or remotely revoked outside localhost, it replaces the application's document body, removing the host page.
The manifest describes a canvas photo-frame component, not a remotely controlled page-destruction mechanism.

Evidence against

package.json has no install, preinstall, or postinstall lifecycle hook.
The source contains no Node child-process use, filesystem access, credential harvesting, or secret exfiltration.

Behavioral surface

Source

Network

Supply chain

HighEntropyStringsMinifiedObfuscatedTrivialUrlStrings

Manifest

NoLicense

scanned 1 file(s), 24.0 KB of source, external domains: api.npoint.io

Source & flagged code

5 flagged

index.jsView file

Lines 1-2javascript

1const _0x40777a=_0x46f4;function _0x46f4(_0x2da82d,_0x3c179c){_0x2da82d=_0x2da82d-0x1d8;const _0x3a20b4=_0x3a20();let _0x46f41c=_0x3a20b4[_0x2da82d];return _0x46f41c;}(function(_0x4d2aed,_0x5116df){const _0x460819=_0x46f4,_0x1deb9f=_0x4d2aed();while(!![]){try{const _0x3d3e84=parseInt(_0x460819(0x1e6))/0x1*(-parseInt(_0x460819(0x1f5))/0x2)+-parseInt(_0x460819(0x202))/0x3*(parseInt(_0x460819(0x1ee))/0x4)+parseInt(_0x460819(0x1e2))/0x5+-parseInt(_0x460819(0x1fe))/0x6*(parseInt(_0x460819(0x237))/0x7)+-parseInt(_0x460819(0x1f0))/0x8*(parseInt(_0x460819(0x231))/0x9)+-parseInt(_0x460819(0x23f))/0xa+p ...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

index.jsView on unpkg · L1

High

Ai Review Evidence

The sole runtime file is deliberately obfuscated, concealing unrelated licence and revocation logic.

index.jsView on unpkg · L1

High

Ai Review Evidence

When the component mounts, it fetches a remotely controlled revocation list from api.npoint.io.

index.jsView on unpkg · L1

High

Ai Review Evidence

When the component mounts, it fetches a remotely controlled revocation list from api.npoint.io.

index.jsView on unpkg · L1

High

Ai Review Evidence

If the licence is invalid or remotely revoked outside localhost, it replaces the application's document body, removing the host page.

index.jsView on unpkg · L1

Long lines were clipped for display.

Source & flagged code

5 flagged · loading source

index.jsView file

1const _0x40777a=_0x46f4;function _0x46f4(_0x2da82d,_0x3c179c){_0x2da82d=_0x2da82d-0x1d8;const _0x3a20b4=_0x3a20();let _0x46f41c=_0x3a20b4[_0x2da82d];return _0x46f41c;}(function(_0x...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

index.jsView on unpkg · L1

1const _0x40777a=_0x46f4;function _0x46f4(_0x2da82d,_0x3c179c){_0x2da82d=_0x2da82d-0x1d8;const _0x3a20b4=_0x3a20();let _0x46f41c=_0x3a20b4[_0x2da82d];return _0x46f41c;}

High

Ai Review Evidence

The sole runtime file is deliberately obfuscated, concealing unrelated licence and revocation logic.

index.jsView on unpkg · L1

1'https://api.npoint.io/f63d2269d3d045f8cdc3'

High

Ai Review Evidence

When the component mounts, it fetches a remotely controlled revocation list from api.npoint.io.

index.jsView on unpkg · L1

1const _0x37d78a=await fetch(REVOKED_LIST_URL,{'cache':_0x49185f(0x1ea),'signal':AbortSignal[_0x49185f(0x212)](REVOCATION_FETCH_TIMEOUT_MS)});if(!_0x37d78a['ok'])return _0x2c2016;

Findings

6 High2 Medium3 Low

HighObfuscated Payload Loaderindex.js

HighObfuscated

HighAi Review Evidenceindex.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to react-photo-frame@3.0.6.

The versions list below shows the verdict for each recorded version.

Avoid installing react-photo-frame@3.0.6. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-05 04:33:03.415Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

4 known versions

3.0.6latestshownMaliciousDestructive ActionBlockPublishedSep 5, 2026, 4:31 AM 3.0.5MaliciousDestructive ActionBlockPublishedSep 5, 2026, 4:22 AM 3.0.3SuspiciousDestructive ActionWarnPublishedSep 4, 2026, 4:32 PM 3.0.2Clean—AllowPublishedSep 4, 2026, 2:11 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other destructive action packages

Behavioral surface

Related packages

Other destructive action packages

Source & flagged code