sysdo@1.0.0: Malicious npm security report (Block)

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Running the sysdo CLI starts a hidden Python application that monitors clipboard changes and exfiltrates their contents. A hotkey can additionally capture and upload the full screen.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

User runs the sysdo CLI.

Impact

Sensitive clipboard text and screenshots can be sent off-device without per-item consent.

Mechanism

Hidden clipboard monitoring and screenshot upload via remote HTTP POST.

Attack narrative

The package has no install hook, but its declared CLI executes pointer.py. That program repeatedly reads clipboard changes and POSTs them to iq-sec.vercel.app while its UI is not hidden. It also registers a screen-capture hotkey that captures the primary monitor, encodes it, and uploads it to the same endpoint. Stealth hide/show controls conceal the application.

Rationale

This is concrete runtime data exfiltration through automatic clipboard collection and remote POSTs, supplemented by screenshot upload capability. The absence of lifecycle hooks does not remove the malicious user-execution attack surface.

Evidence

package.jsonindex.jspointer.pystart_tool.vbs%TEMP%\python-3.12.3-amd64.exe

Network endpoints1

iq-sec.vercel.app/api

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The CLI entrypoint launches pointer.py after installing Python and its dependencies.
pointer.py continuously reads changed clipboard text while visible and submits it to a remote API.
It can capture the full primary monitor, base64-encode the image, and upload it to that API.
The package provides stealth hide/show hotkeys and an invisible UI, concealing this collection activity.

Evidence against

package.json contains no preinstall, install, or postinstall lifecycle hook.
Screen capture is initiated by a registered hotkey; the clipboard monitor is automatic after launch.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 4.09 KB of source, external domains: www.python.org

Source & flagged code

3 flagged

pointer.pyView file

•path = pointer.py kind = build_helper sizeBytes = 31787 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

pointer.pyView on unpkg

index.jsView file

•matchType = normalized_sha256 matchedPackage = syspo@1.0.1 matchedPath = index.js matchedIdentity = npm:c3lzcG8:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = dcd6e9f81522be69 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = syspo@1.0.1 matchedPath = index.js matchedIdentity = npm:c3lzcG8:1.0.1 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

Source & flagged code

3 flagged · loading source

pointer.pyView file

•path = pointer.py kind = build_helper sizeBytes = 31787 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

pointer.pyView on unpkg

index.jsView file

•matchType = normalized_sha256 matchedPackage = syspo@1.0.1 matchedPath = index.js matchedIdentity = npm:c3lzcG8:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = dcd6e9f81522be69 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = syspo@1.0.1 matchedPath = index.js matchedIdentity = npm:c3lzcG8:1.0.1 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Findings

2 High3 Medium4 Low

HighKnown Malware Source Similarityindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

MediumEnvironment Vars

MediumShips Build Helperpointer.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings