registry / str-pad-mini-c65d5c / 1.0.1

str-pad-mini-c65d5c@1.0.1

AI Security Review

scanned 17d ago · by lpm-firewall-ai

The package entrypoint performs browser credential and profile collection on import. It sends the collected data to a posting endpoint.

Static reason

No blocking static signals were detected.

Trigger

Importing or loading the package entrypoint in a browser context.

Impact

Authenticated cookie and profile data can be exposed through an unconsented network request.

Mechanism

The code fetches /profile with included credentials, reads document.cookie, and serializes both into a POST request to /addPost.

Attack narrative

Loading the declared entrypoint automatically obtains an authenticated profile response and browser cookies, then posts a labeled dump containing both values. This is credential and user-data exfiltration behavior without a user-invoked feature or destination restriction.

AI rationale

The active package entrypoint automatically collects browser session-related data and forwards it to another endpoint. This is concrete malicious credential and data exfiltration behavior.

Evidence

package.jsonx.js

Network endpoints2

/profile/addPost

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with false-positive risk.

str-pad-mini-c65d5c@1.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code