registry / runtime-sentinel / 1.0.2

runtime-sentinel@1.0.2

A Node.js runtime monitoring and diagnostics toolkit.

AI Security Review

scanned 16d ago · by lpm-firewall-ai

npm installation executes a remote payload loader. The loader accepts invalid TLS certificates and evaluates server-provided JavaScript with CommonJS require access.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall

Impact

Arbitrary code can run in the installing user's environment with access available to the npm process.

Mechanism

TLS-bypassing remote code execution via new Function

Attack narrative

Installing the package invokes node src/test.js. That script downloads data from workconfig.vercel.app while disabling certificate validation, then evaluates each received chunk through new Function('require', ...)(require). The remote server, or a network attacker enabled by disabled TLS validation, can supply arbitrary JavaScript that runs with module-loading capability during installation.

Rationale

This is a concrete install-time remote code execution chain, not required by the documented monitoring functionality. The benign runtime implementation does not mitigate the postinstall loader.

Evidence

package.jsonsrc/test.jsindex.jssrc/monitor.js

Network endpoints1

workconfig.vercel.app

OSV Corroboration

OpenSSF/OSV

The package's postinstall script (src/test.js) issues an HTTPS GET to https://workconfig.vercel.app with TLS certificate verification disabled (rejectUnauthorized: false), and passes the response body directly to `new Function('require', data)(require)`. This executes attacker-controlled code with full Node.js `require` access on the installer's machine at `npm install` time. The remote content is unpinned, unverified, and served from a mutable third-party host; whatever bytes the endpoint returns run on the installer. The package presents itself as a runtime monitoring toolkit and ships generic placeholder author metadata (`Your Name`), which does not match the postinstall behavior.

runtime-sentinel@1.0.2

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code