registry / Credential exfiltration / rwc-client
rwc-client
This report shows the evidence for rwc-client@0.29.19. 10 of 10 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection confirms a concrete install-time bootstrapper for an obfuscated credential-harvesting/exfiltration payload. This is malicious behavior, not a package-aligned build dependency.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Installing rwc-client@0.29.19 with npm lifecycle scripts enabled.
Impact
Compromise of developer credentials or tokens available to the installing user.
Mechanism
Obfuscated install-time credential harvesting and HTTP exfiltration.
Attack narrative
The preinstall hook invokes setup.mjs, which obtains a Bun executable if absent and runs the bundled obfuscated math_init.js. That payload uses filesystem, OS, child-process, token discovery, and fetch-based chunked POST logic; its token handlers explicitly reference GitHub-token forms. This is unrelated to the advertised browser chat client and executes before user code.
AI rationale
Source inspection confirms a concrete install-time bootstrapper for an obfuscated credential-harvesting/exfiltration payload. This is malicious behavior, not a package-aligned build dependency.
Evidence
package.jsonsetup.mjsmath_init.js
Network endpoints1
github.com/oven-sh/bun/releases/download/bun-v1.3.13/
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json runs `node setup.mjs` as preinstall.
- setup.mjs downloads Bun from GitHub and executes math_init.js during install.
- math_init.js is a 728 KB obfuscated executable payload, not chat-client code.
- math_init.js imports child_process, fs, os, and contains credential-token handlers (`ghtoken`, `ghs_old`, `ghs_jwt`).
- The payload enumerates credential candidates and sends data in HTTP POST chunks via fetch.
- Install errors are caught and suppressed after payload execution.
Evidence against
- The runtime dist bundle appears to be a OneReach Vue chat client.
- No AI-agent control-surface mutation was identified.
Behavioral surface
ChildProcessEvalFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicenseWildcardDependency
Oversized source lightweight scan
dist/lib/richWebChat.common.js5.41 MB file, sampled 256 KB
ChildProcessEvalShellHighEntropyStringsUrlStringsecma-international.orggithub.comwww.w3.org
dist/lib/richWebChat.common.vendors~or-webform.js9.11 MB file, sampled 256 KB
EvalHighEntropyStringsMinifiedUrlStringsapi.mapbox.comwww.w3.org
dist/lib/richWebChat.umd.js5.41 MB file, sampled 256 KB
ChildProcessEvalShellHighEntropyStringsUrlStringsecma-international.orggithub.comwww.w3.org
dist/lib/richWebChat.umd.min.js2.15 MB file, sampled 256 KB
ChildProcessEvalShellHighEntropyStringsMinifiedUrlStringsgithub.comwww.w3.org
dist/lib/richWebChat.umd.min.vendors~or-webform.js9.11 MB file, sampled 256 KB
EvalHighEntropyStringsMinifiedUrlStringsapi.mapbox.comwww.w3.org
dist/lib/richWebChat.umd.vendors~or-webform.js9.11 MB file, sampled 256 KB
EvalHighEntropyStringsMinifiedUrlStringsapi.mapbox.comwww.w3.org
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node setup.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgmath_init.jsView file
1// @bun @bun-cjs
L2: var MmgoCP,etDiOOB,JqTtnbZ,bc3Kak,ZQmUTyQ,TTUgga,MDX6yrw,h8wMJNB,CabwE2L,x5ErqV;function WV8StW(MmgoCP,etDiOOB,JqTtnbZ){for(JqTtnbZ=0x0;JqTtnbZ<etDiOOB;JqTtnbZ++)MmgoCP.push(MmgoCP...
Low
Eval
Package source references a known benign dynamic code generation pattern.
math_init.jsView on unpkg · L1dist/lib/richWebChat.umd.min.jsView file
312contains invisible/control Unicode U+200B (zero width space)
var t=e.defineLocale("he",{months:"ינואר_פברואר_מרץ_אפריל_מאי_יוני_יולי_אוגוסט_ספטמבר_אוקטובר_נובמבר_דצמבר".split("_"),monthsShort:"ינו׳_פבר׳_מרץ_אפר׳_מאי_יוני_יולי_אוג׳_ספט׳_אוק׳_נוב׳_דצמ׳".split("_"),weekdays:"ראשון_שני_שלישי_רביעי_חמישי_
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/lib/richWebChat.umd.min.jsView on unpkg · L312•Trigger-reachable chain: manifest.main -> dist/lib/richWebChat.umd.min.js
Reachable file contains a blocking source-risk pattern.
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/lib/richWebChat.umd.min.jsView on unpkgdist/lib/richWebChat.umd.jsView file
•path = dist/lib/richWebChat.umd.js
kind = oversized_source_file
sizeBytes = 5668475
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/lib/richWebChat.umd.jsView on unpkgsetup.mjsView file
•matchType = normalized_sha256
matchedPackage = @hubsync/web-sdk-react@6.3.16
matchedPath = setup.mjs
matchedIdentity = npm:QGh1YnN5bmMvd2ViLXNkay1yZWFjdA:6.3.16
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
setup.mjsView on unpkg•matchType = malicious_source_fingerprint_signature
signature = 53dfd1794666055e
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = rwc-client@0.29.14
matchedPath = setup.mjs
matchedIdentity = npm:cndjLWNsaWVudA:0.29.14
similarity = 1.000
shingleOverlap = 57
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
setup.mjsView on unpkgFindings
2 Critical3 High4 Medium6 Low
CriticalTrojan Source Unicodedist/lib/richWebChat.umd.min.js
CriticalTrigger Reachable Dangerous Capabilitydist/lib/richWebChat.umd.min.js
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similaritysetup.mjs
HighKnown Malware Source Fingerprint Signaturesetup.mjs
MediumNetwork
MediumOversized Source Filedist/lib/richWebChat.umd.js
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
LowEvalmath_init.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to rwc-client@0.29.19.
The versions list below shows the verdict for each recorded version.
- Avoid installing rwc-client@0.29.19. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
10 known versions0.29.19latestshownMaliciousCredential ExfiltrationBlockPublishedAug 4, 2026, 12:33 PM0.29.18MaliciousMalwareBlockPublishedAug 4, 2026, 11:55 AM0.29.17MaliciousMalwareBlockPublishedAug 4, 2026, 11:43 AM0.29.16MaliciousMalwareBlockPublishedAug 4, 2026, 11:41 AM0.29.15MaliciousMalwareBlockPublishedAug 4, 2026, 11:13 AM0.29.14MaliciousCredential ExfiltrationBlockPublishedAug 4, 2026, 11:05 AM0.29.13MaliciousCredential ExfiltrationBlockPublishedAug 4, 2026, 10:59 AM0.29.12MaliciousMalwareBlockPublishedAug 4, 2026, 10:47 AM0.29.11MaliciousMalwareBlockPublishedAug 4, 2026, 10:45 AM0.29.10MaliciousMalwareBlockPublishedAug 4, 2026, 10:39 AM