shadxino
High-performance DOM utility and diagnostic bridge for modern web applications.
This report shows the evidence for shadxino@2.0.9, the only known version.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource establishes a concrete covert assessment-cheating and proctor-evasion workflow with persistence, not a benign DOM utility. The unused browser-cookie helper further raises risk, while the install hook itself is not the attack trigger.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs `shadxino` (directly or through its CLI bin entrypoint).
Impact
Covert extraction of on-screen assessment content, automated answer generation, and resistance to user or proctor termination.
Mechanism
stealth UI capture, ChatGPT automation, proctor evasion, and watchdog persistence
Attack narrative
The CLI detaches a watchdog, copies Electron to `SearchApp.exe`, and respawns it when killed. The Electron app captures foreground-window pixels or accessibility text, injects the captured content into a concealed ChatGPT window, and reads answers back into an overlay. Native window APIs hide the overlay from capture and include logic specifically intended to evade `core.exe` scans. A bundled cookie-decryption helper adds credential-harvesting capability, although no inspected source path invokes it.
AI rationale
Source establishes a concrete covert assessment-cheating and proctor-evasion workflow with persistence, not a benign DOM utility. The unused browser-cookie helper further raises risk, while the install hook itself is not the attack trigger.
Evidence
package.jsonREADME.mdmain.jsbin/kalamasha-tool.jsbin/stealth_capture.ps1bin/uia_extract.pybin/chrome_cookies.ps1bin/uia_extract.execonfig.json
Network endpoints1
chatgpt.com/?model=auto
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- `main.js` captures foreground-window pixels and UI Automation text.
- `main.js` sends captured questions to `https://chatgpt.com/?model=auto` via injected page scripts.
- `main.js` hides windows from capture, detects `core.exe`, and temporarily disables its capture exclusion to evade scanning.
- `bin/kalamasha-tool.js` clones Electron as `SearchApp.exe`, detaches it, and respawns it after termination.
- `bin/chrome_cookies.ps1` decrypts Chrome/Edge/Brave cookies for ChatGPT/OpenAI domains.
- Embedded prompts and README describe covert answering of captured test questions.
Evidence against
- `package.json` postinstall only attempts to require Electron; it does not modify AI-agent configuration.
- No source link invokes `bin/chrome_cookies.ps1`, and no non-ChatGPT exfiltration endpoint was found.
- The observed remote endpoint is ChatGPT, used as the package's answer-generation backend.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNativeBindingsShell
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "try{require('electron')}catch(e){console.log('Electron will download on first run.')}"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "try{require('electron')}catch(e){console.log('Electron will download on first run.')}"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/kalamasha-tool.jsView file
2L3: const { spawn, execSync } = require('child_process');
L4: const path = require('path');
High
Child Process
Package source references child process execution.
bin/kalamasha-tool.jsView on unpkg · L2Findings
1 Critical6 High4 Medium4 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/kalamasha-tool.js
HighShellmain.js
HighCopied Package Dependency Bridgebin/kalamasha-tool.js
HighCross File Remote Execution Contextbin/kalamasha-tool.js
HighRuntime Package Installbin/kalamasha-tool.js
MediumEnvironment Vars
MediumShips Native Binarybin/uia_extract.exe
MediumShips Build Helperbin/chrome_cookies.ps1
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to shadxino@2.0.9.
The versions list below shows the verdict for each recorded version.
- Avoid installing shadxino@2.0.9. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.