registry / test__123q1 / 2.1.3

test__123q1@2.1.3

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Installing the package runs a credential-stealing payload without user action. It collects local secrets, sends an archive to Telegram, and attempts to republish the victim’s npm packages with the payload installed.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation invokes the postinstall script.

Impact

Loss of credentials and private files, followed by compromise of packages owned by a stolen npm token.

Mechanism

Broad local secret collection, Telegram exfiltration, and npm package infection using stolen tokens.

Attack narrative

On installation, the package scans the user’s home and project directories for secrets, credentials, wallet data, npm configuration, and environment values. It builds and uploads an archive of the findings to Telegram. It then collects npm tokens, identifies packages belonging to those token holders, downloads and modifies them to run this payload at postinstall, and republishes them using the stolen credentials.

Rationale

This is a concrete install-time credential theft and npm supply-chain propagation payload. The source directly implements collection, exfiltration, token use, and package republishing.

Evidence

package.jsondist/script.jsscripts.json.npmrcreport-<timestamp>/files/*report-<timestamp>.zip

Network endpoints3

api.telegram.orgregistry.npmjs.org/-/whoamiregistry.npmjs.org/-/v1/search

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The manifest automatically runs dist/script.js after installation.
The script searches the home directory and project paths for sensitive files, SSH keys, cloud credentials, npm configuration, and relevant environment variables.
It copies collected files into a report, archives the report, and uploads it to Telegram.
It extracts npm tokens, enumerates the token holder’s packages, adds its own postinstall hook, copies its payload, and publishes altered packages.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 2 file(s), 41.3 KB of source, external domains: api.telegram.org, registry.npmjs.org

Source & flagged code

8 flagged

package.jsonView file

Lines 1-19json

2 "name": "test__123q1",

3 "version": "2.1.3",

4 "description": "",

5 "main": "dist/index.js",

6 "scripts": {

7 "build": "tsc",

8 "postinstall": "node dist/script.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

9 },

10 "devDependencies": {

11 "typescript": "^5.5.3"

12 },

13 "publishConfig": {

14 "registry": "https://registry.npmjs.org"

15 },

16 "files": [

17 "dist"

18 ]

19}

dist/script.jsView file

Lines 31-71javascript

31 __setModuleDefault(result, mod);

32 return result;

33 };

34})();

35var __awaiter = (this && this.__awaiter) || function (thisArg

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node dist/script.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/script.jsView file

51const node_util_1 = require("node:util"); L52: const node_child_process_1 = require("node:child_process"); L53: const node_path_2 = __importDefault(require("node:path")); ... L139: 'pass', 'pwd', 'secret', 'token', 'key', 'auth', 'api', L140: 'private', 'mnemonic', 'seed', 'credential', 'access', 'npm', L141: ]; ... L235: 'privatekey', L236: 'private_key', L237: 'privkey', ... L321: const npmrcPath = node_path_1.default.join(dirPath, ".npmrc"); L322: yield promises_1.default.writeFile(npmrcPath, `//registry.npmjs.org/:_authToken=${token}\nregistry=https://registry.npmjs.org/\n`); L323: });

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/script.jsView on unpkg · L51

Findings

3 Critical5 High3 Medium5 Low

CriticalHardcoded Runtime Data Exfiltrationdist/script.js

CriticalCredential Exfiltrationdist/script.js

CriticalTrigger Reachable Dangerous Capabilitydist/script.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/script.js

HighSame File Env Network Executiondist/script.js

HighEntrypoint Foreign Package Code Overwritedist/script.js

HighTrigger Reachable Credential Exfiltrationdist/script.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem