registry / Credential exfiltration / tilaver-mfa
tilaver-mfa
tilaver-mfa-app
This report shows the evidence for tilaver-mfa@1.0.0. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiDirect source inspection confirms credential collection and exfiltration, not merely suspicious primitives. The lack of an install lifecycle hook limits the trigger to import/execution but does not make the payload benign.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Importing the package main entrypoint or executing `node index.js`
Impact
Disclosure of Discord tokens, passwords, cookies, payment-card data, Roblox data, and screenshots
Mechanism
Harvests local browser/Discord credentials and submits collected data to attacker-controlled endpoints
Attack narrative
`index.js` initializes filesystem, crypto, HTTP(S), OS, and shell access; targets local application and home directories; identifies and decrypts Discord tokens; and records passwords, cookies, cards, Roblox data, and screenshots. It embeds a Discord webhook plus a worker-thread relay that POSTs worker payload data to `150.136.37.62` on port 5000, then invokes `run()` at module top level.
AI rationale
Direct source inspection confirms credential collection and exfiltration, not merely suspicious primitives. The lack of an install lifecycle hook limits the trigger to import/execution but does not make the payload benign.
Evidence
package.jsonindex.js
Network endpoints2
discord.com150.136.37.62:5000/api/v2/c
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- `index.js` executes `run()` at top level.
- `index.js` reads APPDATA, LOCALAPPDATA, and the home directory.
- `index.js` defines Discord token patterns and AES-GCM decryption.
- `index.js` collects `discord`, `passwords`, `cookies`, `roblox`, `cards`, and `screenshot` data.
- `index.js` embeds a Discord webhook and POST relay to `150.136.37.62:5000/api/v2/c`.
- `index.js` uses `child_process.execSync`, filesystem access, and worker-thread relay code.
Evidence against
- `package.json` contains no preinstall, install, or postinstall lifecycle hook.
- Only `package.json` and the obfuscated `index.js` are present; no legitimate MFA implementation is evident.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedTrivialUrlStrings
Source & flagged code
7 flagged · loading sourceindex.jsView file
1patternName = aws_access_key
severity = critical
line = 1
matchedText = let vmh=...;});
Critical
1let vmh=typeof globalThis!=='undefined'?globalThis:typeof window!=='undefined'?window:global,vmb_176c8b=vmh['vmb_176c8b']||(vmh['vmb_176c8b']={});const vmr_56fa82=(function(){var m...
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
index.jsView on unpkg · L11Trigger-reachable chain: manifest.main -> index.js
L1: let vmh=typeof globalThis!=='undefined'?globalThis:typeof window!=='undefined'?window:global,vmb_176c8b=vmh['vmb_176c8b']||(vmh['vmb_176c8b']={});const vmr_56fa82=(function(){var m...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L11
Findings
4 Critical2 High4 Medium4 Low
CriticalCritical Secretindex.js
CriticalCredential Exfiltrationindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
CriticalSecret Patternindex.js
HighChild Processindex.js
HighSame File Env Network Executionindex.js
MediumDynamic Requireindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to tilaver-mfa@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing tilaver-mfa@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.