registry / titan-exchange-shared-permissions / 99.9.12

titan-exchange-shared-permissions@99.9.12

AI Security Review

scanned 5d ago · by lpm-firewall-ai

The published package carries an inert nested archive with install-time outbound telemetry. The current version does not extract or execute it.

Static reason

No blocking static signals were detected.

Trigger

A user manually extracts and installs the bundled nested archive.

Impact

Sends an install-event notification to a third-party webhook.

Mechanism

Nested prior-version archive with postinstall HTTPS beacon

Rationale

The current package is non-executing, but it deliberately carries a recursively bundled archive containing install-time network behavior. This is an inert staged payload carrier warranting a warning, not a block.

Evidence

package.jsonindex.jstitan-exchange-shared-permissions-99.9.11.tgztitan-exchange-shared-permissions-99.9.11.tgz:package/package.jsontitan-exchange-shared-permissions-99.9.11.tgz:package/index.js

Network endpoints1

webhook.site/76b77e84-dcba-4b77-aaae-e023d7cceba7

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Dangerous Capability with false-positive risk.

titan-exchange-shared-permissions@99.9.12

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code