registry / syspo / 1.0.1

syspo@1.0.1

System binary configuration tool

AI Security Review

scanned 19d ago · by lpm-firewall-ai

Running the syco1 CLI launches a hidden Windows automation tool. It continuously uploads clipboard contents and uploads screenshots on a hotkey.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

User runs the syco1 bin command or index.js.

Impact

Secrets, private text, and screen content can be disclosed to the remote service.

Mechanism

Clipboard/screen collection with remote HTTP exfiltration

Attack narrative

The public CLI installs Python dependencies and launches pointer.py. That script polls the system clipboard every 300 ms and sends changed clipboard text to new-pointer.vercel.app; it also captures and uploads screenshots when triggered. Its hidden transparent UI and stealth controls obscure this collection behavior.

Rationale

Source confirms concrete remote exfiltration of clipboard data and screenshots, activated by the package’s advertised executable. Absence of an install hook does not remove the malicious runtime behavior.

Evidence

package.jsonindex.jspointer.pystart_tool.vbs

Network endpoints2

new-pointer.vercel.app/apiwww.python.org/ftp/python/3.12.3/python-3.12.3-amd64.exe

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-6406

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in syspo (npm)

Details

The package is published as a 'System binary configuration tool' but its actual behavior is a covert clipboard/screen-capture overlay. On invocation (npx/bin entry), index.js spawns pointer.py, which installs a global clipboard monitor and an Alt+S full-screen screenshot hotkey; clipboard text and base64-encoded screenshots are POSTed to the hardcoded endpoint https://iq-overlay-pointer.vercel.app/api with no configuration option for the destination and no user disclosure. To bootstrap that payload, index.js silently downloads python-3.12.3-amd64.exe from python.org into TEMP and runs it with `/quiet InstallAllUsers=0 PrependPath=1`, then runs `pip install` for keyboard, pyautogui, mss, pywin32, and uiautomation — a full language runtime and input/screen-capture toolchain installed without any prompt. pointer.py also registers system-wide keyboard hooks (ctrl+c/v, alt+s, f8/f9/f10, alt+m, alt+1..5, ctrl+q panic-exit) and an always-on-top transparent Tk overlay (`-topmost`, `overrideredirect`), and types attacker-controlled responses back via pyautogui. The package.json metadata (description 'System binary configuration tool', keywords system/binary/util/config, author 'SysDev') is a cover story unrelated to the shipped functionality.

References

OSV advisory PACKAGE PACKAGE PACKAGE

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

pointer.py monitors clipboard every 300ms and posts changed text to a remote API.
pointer.py captures full-screen images, base64-encodes them, and uploads them to the same API.
index.js runs pointer.py from the public syco1 bin command.
The UI is intentionally hidden/transparent and supports stealth hiding.
start_tool.vbs can relaunch pointer.py elevated and hidden if executed.

Evidence against

package.json has no npm lifecycle hooks.
No source evidence of persistence being automatically invoked by installation.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 4.08 KB of source, external domains: www.python.org

Source & flagged code

3 flagged

pointer.pyView file

•path = pointer.py kind = build_helper sizeBytes = 31644 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

pointer.pyView on unpkg

index.jsView file

•matchType = normalized_sha256 matchedPackage = sysb1@1.0.3 matchedPath = index.js matchedIdentity = npm:c3lzYjE:1.0.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = dcd6e9f81522be69 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = sysb1@1.0.3 matchedPath = index.js matchedIdentity = npm:c3lzYjE:1.0.3 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

Source & flagged code

3 flagged · loading source

pointer.pyView file

•path = pointer.py kind = build_helper sizeBytes = 31644 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

pointer.pyView on unpkg

index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

High

Known Malware Source Fingerprint Signature

Findings

2 High3 Medium4 Low

HighKnown Malware Source Similarityindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

MediumEnvironment Vars

MediumShips Build Helperpointer.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings