stestenv
A fast, validated, zero-dependency environment configuration toolkit for Node.js
This report shows the evidence for stestenv@1.0.1, the only known version.
AI Security Review
scanned 25d ago · by lpm-firewall-aiActive, concealed execution of an image-carried PowerShell command occurs on normal package use. The hidden detached launcher is concrete malware behavior.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Importing the CommonJS entrypoint or running the command-line entrypoint.
Impact
A package consumer on Windows can have an opaque command executed without an explicit request for that behavior.
Mechanism
The entrypoints extract text from an adjacent image, construct an encoded PowerShell invocation, write a temporary VBScript, and start it detached with a hidden window.
Attack narrative
The primary module automatically launches a concealed command when imported. It obtains the command from an image file, invokes PowerShell with an encoded command argument, and uses a temporary self-deleting VBScript to hide and detach execution. The command-line entrypoint contains and automatically invokes the same launcher. This is active opaque payload execution unrelated to environment configuration.
AI rationale
Active, concealed execution of an image-carried PowerShell command occurs on normal package use. The hidden detached launcher is concrete malware behavior.
Evidence
dist/index.cjsdist/cli.cjs
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package exposes the affected CommonJS module and command-line entrypoint.
- The import entrypoint reads data from an adjacent image and passes it as an encoded PowerShell command.
- It writes a temporary VBScript that launches the command hidden and detached through Windows Script Host.
- The module invokes this launcher during import, and the command-line entrypoint invokes the same launcher.
Evidence against
- No install lifecycle hook or network endpoint was identified in the inspected metadata and entrypoints.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell
HighEntropyStringsMinified
Source & flagged code
6 flagged · loading sourcedist/decode.jsView file
1const telemetryFs = require('fs');
L2: const streamPath = require('path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/decode.jsView on unpkg · L1dist/cli.cjs#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cli.cjs#virtual:normalized:round1View on unpkgdist/cli.cjsView file
•matchType = normalized_sha256
matchedPackage = native-env@1.0.1
matchedPath = dist/cli.cjs
matchedIdentity = npm:bmF0aXZlLWVudg:1.0.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
Findings
5 High3 Medium4 Low
HighSemantic Analysis Limiteddist/cli.cjs#virtual:normalized:round1
HighKnown Malware Source Similaritydist/cli.cjs
HighKnown Malware Source Similaritydist/index.cjs
HighAi Review Evidencepackage.json
HighAi Review Evidencedist/index.cjs
MediumDynamic Requiredist/decode.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to stestenv@1.0.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing stestenv@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.