registry / sinful / 1.0.0

sinful@1.0.0

AI Security Review

scanned 15d ago · by lpm-firewall-ai

Installation downloads a mutable remote executable without integrity verification. The CLI executes that binary only when invoked by the user.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall; later execution of the sinful command

Impact

A compromised or replaced release asset can execute with the invoking user's privileges.

Mechanism

remote latest-release binary staging and CLI execution

AI rationale

The package is a staged payload carrier: it installs mutable remote code outside the package integrity boundary and later executes it. This warrants a warning, not a block, because no concrete malicious behavior is present in the inspected source.

Evidence

package.jsoninstall.jsrun.js~/.sinful/sinful~/.sinful/sinful.exe

Network endpoints1

github.com

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-16284

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in sinful (npm)

Details

The package was found to contain malicious code or consuming dependency that contains malicious code ## Source: ghsa-malware (1cbf9b08a145b35b211fe7ccdfb031d59dabeaa3024fbef302f6f9d2b47dcf2e) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

References

OSV advisory ADVISORY PACKAGE

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for block

postinstall invokes install.js.
Installer downloads an unpinned latest-release executable into ~/.sinful and marks it executable.
The CLI subsequently executes that downloaded binary.

Evidence against

Source contains no credential harvesting, data exfiltration, or AI-agent configuration writes.
The downloaded binary is not executed during installation; execution requires the sinful CLI command.

Behavioral surface

Source

ChildProcessFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 6.37 KB of source, external domains: github.com

Source & flagged code

6 flagged

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

9"scripts": { "postinstall": "node install.js" }

High

Suspicious Lifecycle Evidence

postinstall invokes install.js.

package.jsonView on unpkg · L9

•scripts.postinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

install.jsView file

49const exePath = path.join(installDir, platform === 'win32' ? 'sinful.exe' : 'sinful'); const downloadUrl = `https://github.com/${REPO_OWNER}/${REPO_NAME}/releases/latest/download/${exeName}`;

High

Ai Review Evidence

Installer downloads an unpinned latest-release executable into ~/.sinful and marks it executable.

install.jsView on unpkg · L49

61const file = fs.createWriteStream(dest); const request = https.get(url, (response) => { if (response.statusCode === 301 || response.statusCode === 302) { return downloadFile(response.headers.location, dest).then(resolve).catch(reject); } if (response.statusCode !== 200) { return reject(new Error(`Status code: ${response.statusCode}`)); } response.pipe(file); file.on('finish', () => { file.close(); if (platform !== 'win32') {

High

Ai Review Evidence

Installer downloads an unpinned latest-release executable into ~/.sinful and marks it executable.

install.jsView on unpkg · L61

run.jsView file

18const args = process.argv.slice(2); const result = spawnSync(exePath, args, { stdio: 'inherit' });

High

Ai Review Evidence

The CLI subsequently executes that downloaded binary.

run.jsView on unpkg · L18

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

9"scripts": { "postinstall": "node install.js" }

High

Suspicious Lifecycle Evidence

postinstall invokes install.js.

package.jsonView on unpkg · L9

•scripts.postinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

install.jsView file

49const exePath = path.join(installDir, platform === 'win32' ? 'sinful.exe' : 'sinful'); const downloadUrl = `https://github.com/${REPO_OWNER}/${REPO_NAME}/releases/latest/download/${exeName}`;

Findings

5 High2 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidenceinstall.js

HighAi Review Evidencerun.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

LowScripts Present

LowFilesystem

LowUrl Strings

Affected versions and remediation

This report applies to sinful@1.0.0.

See version security history for other recorded verdicts.

Avoid installing sinful@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-23 04:40:08.444Z (UTC).

Source advisory published: 2026-09-18 13:54:41.000Z (UTC).