registry / Data exfiltration / salesforce-vscode-slds

salesforce-vscode-slds

A utility package that reports runtime errors to Sentry using @sentry/node.

This report shows the evidence for salesforce-vscode-slds@2026.7.11. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Source inspection confirms a concrete, automatic install-time telemetry and IP-exfiltration chain, not merely suspicious primitives. The behavior is unnecessary for package installation and uses a hard-coded third-party reporting destination.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation triggers the preinstall lifecycle hook.

Impact

Discloses the installer host's public IP and install-time runtime metadata to a third-party Sentry endpoint without user consent.

Mechanism

install-time public-IP collection and Sentry telemetry upload

Attack narrative

On npm install, the preinstall hook installs a dependency and runs examples/verify.js. That script initializes Sentry using the embedded DSN, actively requests the installer host's public IP from Cloudflare, attaches it as Sentry user data, deliberately throws an error, captures it, and flushes it to the configured Sentry project. This is unconsented install-time data collection and outbound transmission.

AI rationale

Evidence

package.jsonexamples/verify.jssrc/index.jssrc/index.d.ts

Network endpoints4

d4616e08f531447bd415e91fd21940a6@o4510485815754752.ingest.us.sentry.io/4511716882972672www.cloudflare.com/cdn-cgi/traceone.one.one.one/cdn-cgi/trace1.1.1.1/cdn-cgi/trace

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json preinstall runs `npm install @sentry/node && node examples/verify.js`.
examples/verify.js invokes init(), public-IP lookup, error capture, and flush during installation.
src/index.js embeds a default Sentry ingest DSN and initializes reporting with sendDefaultPii: true.
src/index.js fetches Cloudflare trace endpoints, assigns the resolved IP to Sentry user data, then sends a captured exception.

Evidence against

No shell execution, filesystem harvesting, persistence, or AI-agent configuration mutation was found.
The network/reporting code is explicit, but it is invoked automatically by the install lifecycle.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 10.4 KB of source, external domains: 1.1.1.1, one.one.one.one, www.cloudflare.com

Source & flagged code

4 flagged

package.jsonView file

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/index.jsView file

•matchType = normalized_sha256 matchedPackage = chat-adapter-zoom@12.1.31 matchedPath = src/index.js matchedIdentity = npm:Y2hhdC1hZGFwdGVyLXpvb20:12.1.31 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 77336ad547d16a1c signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = chat-adapter-zoom@12.1.31 matchedPath = src/index.js matchedIdentity = npm:Y2hhdC1hZGFwdGVyLXpvb20:12.1.31 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

src/index.jsView on unpkg

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.preinstall = npm install @sentry/node && node examples/verify.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

Findings

1 Critical3 High2 Medium3 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighKnown Malware Source Similaritysrc/index.js

HighKnown Malware Source Fingerprint Signaturesrc/index.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to salesforce-vscode-slds@2026.7.11.

The versions list below shows the verdict for each recorded version.

Avoid installing salesforce-vscode-slds@2026.7.11. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-07-14 03:31:57.829Z (UTC).

Source advisory published: 2026-07-13 00:00:00.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

0.0.1-securitylatestClean—AllowPublishedJul 14, 2026, 1:01 AM 2026.7.11shownMaliciousData ExfiltrationBlockPublishedJul 11, 2026, 1:27 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other data exfiltration packages

Behavioral surface

Source & flagged code

Related packages

Other data exfiltration packages