related_blackbird-toolteadev@2.1.1
This is a [Next.js](https://nextjs.org/) project bootstrapped with [`create-next-app`](https://github.com/vercel/next.js/tree/canary/packages/create-next-app).
AI Security Review
scanned 4h ago · by lpm-firewall-ai`auto.js` contains a concrete self-republishing routine that can publish the user’s project publicly under generated package names and repeat the publication. It is not wired into the manifest’s normal scripts or lifecycle, but the unrelated package ships the routine as executable source.
Static reason
High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review
Trigger
Running `auto.js` directly; the package manifest does not invoke it by default.
Impact
A user with npm publish credentials may unintentionally publish project contents publicly and generate repeated packages under their account.
Mechanism
It edits package.json and package-lock.json, removes the private flag, randomizes the version and package name, then runs `npm publish --access public` in a loop.
Attack narrative
When run, `auto.js` changes the current project’s package metadata, removes its private flag, assigns generated names and versions, then repeatedly publishes publicly through npm. The manifest does not run this file by default, but its unguarded entry call starts the behavior when invoked directly.
AI rationale
`auto.js` contains a concrete self-republishing routine that can publish the user’s project publicly under generated package names and repeat the publication. It is not wired into the manifest’s normal scripts or lifecycle, but the unrelated package ships the routine as executable source.
Evidence
auto.jspackage.jsonpackage-lock.json
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- When `auto.js` runs, it reads and edits the current directory’s package.json, removing `private: true`.
- The script changes the package version and generates a new package name, then runs `npm publish --access public`.
- After publishing, it schedules the process to repeat; an unguarded top-level call starts it when the file is run.
Evidence against
- The manifest defines only standard Next.js scripts and does not wire `auto.js` into a lifecycle hook, bin, or package entry point.
Behavioral surface
ChildProcessFilesystemShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flaggedauto.jsView file
1const fs = require('fs');
L2: const { exec } = require('child_process');
L3: const { uniqueNamesGenerator, adjectives, colors, animals } = require('unique-names-generator');
...
L39:
L40: function checkAndRemovePrivate() {
L41: const animation = ['Sedang memeriksa package... ', 'Sedang memeriksa package. ', 'Sedang memeriksa package.. ', 'Sedang memeriksa package...'];
...
L43: const animationInterval = setInterval(() => {
L44: process.stdout.write('\r' + animation[currentFrame]);
L45: currentFrame = (currentFrame + 1) % animation.length;
...
L51: let packageJson = fs.readFileSync('package.json');
L52: let packageData = JSON.parse(packageJson);
L53: if (packageData.private === true) {
Critical
Npm Publish Worm
Source mutates package metadata and republishes itself to npm.
auto.jsView on unpkg · L11const fs = require('fs');
L2: const { exec } = require('child_process');
L3: const { uniqueNamesGenerator, adjectives, colors, animals } = require('unique-names-generator');
High
•matchType = malicious_source_fingerprint_signature
signature = 45b2b61a8f143289
signatureType = suspicious_hashes
sourceLabel = Datadog
matchedPackage = aggregate_buzzard-silentdev@4.4.3
matchedPath = auto.js
matchedIdentity = npm:[redacted]:4.4.3
similarity = 1.000
shingleOverlap = 2
summary = Datadog malicious npm corpus sample: samples/npm/malicious_intent/aggregate_buzzard-silentdev/4.4.3/2024-05-21-aggregate_buzzard-silentdev-v4.4.3.zip
Findings
1 Critical6 High5 Low
CriticalNpm Publish Wormauto.js
HighChild Processauto.js
HighShell
HighKnown Malware Source Fingerprint Signatureauto.js
HighAi Review Evidenceauto.js
HighAi Review Evidenceauto.js
HighAi Review Evidenceauto.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to related_blackbird-toolteadev@2.1.1.
See all versions of related_blackbird-toolteadev for other recorded verdicts.
- Avoid installing related_blackbird-toolteadev@2.1.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.