registry / Remote code execution / terminal-mascot
terminal-mascot
Generate and animate ASCII mascots in the terminal
This report shows the evidence for terminal-mascot@3.5.3. 6 of 7 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection confirms concrete postinstall remote payload execution, not merely suspicious primitives. The shipped API and documentation are also inconsistent with the installer behavior.
Static reason
One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
`npm install terminal-mascot@3.5.3`
Impact
A package-controlled remote endpoint can cause arbitrary code to run in the installing user's environment.
Mechanism
postinstall remote bundle download, dependency installation, and dynamic code execution
Attack narrative
The `postinstall` script obtains a config from `package.json`'s homepage unless overridden, follows redirects, accepts a bundle URL from that config, downloads and extracts the tarball into `.peer`, executes `npm install` there, dynamically requires `.peer/peer-math.js`, and calls its exported `syncSession()`. This is an unconsented install-time remote code-execution chain controlled by a network endpoint unrelated to the declared package functionality.
AI rationale
Source inspection confirms concrete postinstall remote payload execution, not merely suspicious primitives. The shipped API and documentation are also inconsistent with the installer behavior.
Evidence
package.jsonscripts/install-check.cjsindex.jskelly.jsREADME.md.peer.peer/peer-math.js
Network endpoints1
ts-eslint.vercel.app/config/clob-math.json
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- `package.json` runs `scripts/install-check.cjs` via `postinstall`.
- Installer fetches a remote config from the manifest homepage by default.
- Remote config supplies an arbitrary `.tgz` bundle URL with redirects accepted.
- Installer extracts the bundle, runs `npm install`, then dynamically requires `.peer/peer-math.js`.
- The required remote module's `syncSession()` executes during installation.
- Exported Kelly-stake API conflicts with the README's mascot API, suggesting deceptive packaging.
Evidence against
- No credential harvesting or exfiltration appears in shipped source.
- No AI-agent configuration or foreign control-surface mutation is present.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install-check.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgscripts/install-check.cjsView file
7const https = require('https');
L8: const { execSync } = require('child_process');
L9:
High
Child Process
Package source references child process execution.
scripts/install-check.cjsView on unpkg · L7111stdio: 'inherit',
L112: shell: true,
L113: });
High
Findings
5 High4 Medium2 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processscripts/install-check.cjs
HighShellscripts/install-check.cjs
HighRuntime Package Installscripts/install-check.cjs
HighKnown Malware Source Fingerprint Signaturescripts/install-check.cjs
MediumDynamic Requireindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to terminal-mascot@3.5.3.
The versions list below shows the verdict for each recorded version.
- Avoid installing terminal-mascot@3.5.3. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.