registry / Remote code execution / spark-sf
spark-sf
single file for my website
This report shows the evidence for spark-sf@1.0.2. 2 of 2 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is a concrete remote code execution path in the package's exported runtime artifact, with no integrity control over the downloaded JavaScript. The absence of an npm lifecycle hook does not remove the runtime attack surface.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A consumer opens, embeds, or serves the exported single.svg artifact.
Impact
The remote host can supply arbitrary JavaScript for execution in the consumer's browser context.
Mechanism
Remote JavaScript download followed by dynamic import and browser API tampering.
Attack narrative
The package exports an SVG containing a browser application. Its source fetches JavaScript from bestspark.org, converts the response to a data URL, and dynamically imports it. Because the response is not pinned or verified, the remote server controls code executed whenever the artifact is opened or embedded. The runtime also replaces window.fetch and sends requests through a WebSocket-based service.
AI rationale
This is a concrete remote code execution path in the package's exported runtime artifact, with no integrity control over the downloaded JavaScript. The absence of an npm lifecycle hook does not remove the runtime attack surface.
Evidence
package.jsonsingle.jsbuild_svg.pysingle.svg
Network endpoints2
bestspark.orgwss://bestspark.org/wisp/
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The default export is an SVG runtime artifact.
- The browser code fetches JavaScript from bestspark.org, base64-wraps it as a data URL, and dynamically imports it.
- It replaces window.fetch and forwards requests through a WebSocket service.
- The shipped SVG contains the generated browser application; its build helper inlines the classic script into it.
Evidence against
- No npm install lifecycle hook is present.
- No local credential or filesystem harvesting was confirmed.
Behavioral surface
DynamicRequireFilesystemNetworkWebSocket
HighEntropyStringsMinifiedUrlStrings
Oversized source lightweight scan
Source & flagged code
6 flagged · loading sourcesingle.jsView file
117try {
L118: var xhr = new XMLHttpRequest();
L119: xhr.open("GET", url, false);
L120: xhr.send(null);
L121: return xhr.responseText;
...
L400: }
L401: var UTF8Decoder = typeof TextDecoder != "undefined" ? new TextDecoder("utf8") : void 0;
L402: function UTF8ArrayToString(heap, idx, maxBytesToRead) {
...
L2216: }
L2217: if (Module["stdout"]) {
L2218: FS.createDevice("/dev", "stdout", null, Module["stdout"]);
...
L3988: var summer = new Date(currentYear, 6, 1);
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
single.jsView on unpkg · L1176495L6496: // const { default: LibcurlClient } = await import("./libcurl.mjs");
L6497: const server = localStorage.getItem("wispServer") || "wss://bestspark.org/wisp/"
Medium
Dynamic Require
Package source references dynamic require/import behavior.
single.jsView on unpkg · L6495single.svgView file
113<script>//<![CDATA[
L114: var __require=(G=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(G,{get:(s,a)=>(typeof require<"u"?require:s)[a]}):G)(function(G){if(typeof require<"u")return require.apply(...
L115: `)):typeof readline=="function"&&(B=readline(),B!==null&&(B+=`
...
L125: - nghttp2: MIT License (https://github.[redacted])
L126: `;class uB{constructor(B={}){dg(!0),this.options=B,this.session_ptr=NQ(),this.active_requests=0,this.event_loop=null,this.requests_list=[],this.to_remove=[],this.end_callback_ptr=G...
L127:
Findings
3 Critical1 High4 Medium4 Low
CriticalBuiltin Api Tampering Exfiltrationsingle.svg
CriticalRemote Asset Decode Executesingle.js
CriticalTrigger Reachable Dangerous Capabilitysingle.svg
HighSemantic Analysis Limitedsingle.svg
MediumDynamic Requiresingle.js
MediumNetwork
MediumShips Build Helperbuild_svg.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to spark-sf@1.0.2.
The versions list below shows the verdict for each recorded version.
- Avoid installing spark-sf@1.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.