registry / theme-bundle.chunk.7.js / 1.0.6

theme-bundle.chunk.7.js@1.0.6

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

When the bundled browser script is loaded on a matching theme page, it blocks the page with a deceptive overlay and prevents normal interaction. No network or local-system access was identified.

Static reason

One or more suspicious static signals were detected.

Trigger

Loading the JavaScript as a browser theme chunk.

Impact

Denial of normal website use and concealed page-content replacement.

Mechanism

Obfuscated DOM overlay and input suppression.

Attack narrative

The payload runs immediately in a browser context. It creates a fixed full-screen overlay, modifies a selected theme banner, disables scrolling and page pointer events, and captures keyboard input to cancel it. It keeps the overlay reachable through a random protected window property, then removes its own script tag. The package has no installation hook or exfiltration code, but the included browser payload is intentionally obfuscated and directly disrupts a host website.

AI rationale

This is an intentionally obscured browser denial-of-service payload that alters and locks a host page when deployed. The absence of installation hooks limits the trigger but does not neutralize the concrete malicious behavior.

Evidence

chunk-original.jsdist/theme-bundle.chunk.7.js

Decision evidence

public snapshot

AI called this Malicious at 96.0% confidence as Malware with low false-positive risk.

theme-bundle.chunk.7.js@1.0.6

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code