Loading npm security reports…

tonty-tech-interviews: Malicious npm security report (Block) | LPM Firewall

registry / tonty-tech-interviews / 0.2.66

tonty-tech-interviews@0.2.66

CLI for Tonty Talents technical candidate evaluation — evaluate how engineers work with AI

AI Security Review

scanned 13h ago · by lpm-firewall-ai

Running `tonty-tech-interviews join <code>` obtains server-controlled setup commands and a shell verifier, then executes them in a downloaded workspace. It also records terminal input/output and uploads that recording for cloud sessions.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

User runs `tonty-tech-interviews join <code>` with a cloud session code.

Impact

Remote service can execute arbitrary commands in the session workspace and receive typed terminal content and output.

Mechanism

Remote command and shell-script execution with PTY recording upload.

Attack narrative

After an explicit `join` command, the package trusts its cloud relay for workspace metadata, setup commands, and a verifier. It executes every supplied setup command, writes the relay-provided verifier, and later invokes it with bash. The package records the interactive AI-provider terminal session, including stdin and stdout, and uploads it to the relay. This gives the relay a direct remote-code-execution channel and exposes terminal data.

Rationale

The package has no install-time hook, but its normal cloud-join path executes unvalidated remote commands and a downloaded shell script, then uploads captured interactive terminal data. This is a concrete remote-code-execution and data-exfiltration chain.

Evidence

package.jsondist/bin.jsdist/chunk-LUQX3KMS.jsdist/chunk-VLUNXJRG.js~/tonty-sessions/<scenario>-<id>/verify.sh~/.tonty-tech-interviews/prompts/<id>.md

Source & flagged code

13 flagged · loading source

dist/chunk-LUQX3KMS.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = tonty-tech-interviews@0.2.64 matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.64 similarity = 0.909 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-LUQX3KMS.jsView on unpkg

104// src/commands/index.ts L105: import { execSync as execSync5, execFileSync as execFileSync2 } from "child_process"; L106: import { readFile as readFile3 } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/chunk-LUQX3KMS.jsView on unpkg · L104

594); L595: console.log(chalk2.cyan(" Depuis PowerShell : wsl --install -d Ubuntu")); L596: console.log(chalk2.cyan(" Puis dans Ubuntu : npx tonty-tech-interviews join TONTY-XXXXXXXXXXXXXXX"));

High

Shell

Package source references shell execution.

dist/chunk-LUQX3KMS.jsView on unpkg · L594

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/chunk-LUQX3KMS.js: chalk.gray("\u2502") + center(chalk.dim(`v${VERSION} \u2022 https://tonty.app`), W) + chalk.gray("\u2502") import { writeFile, mkdir } from "fs/promises"; import { writeFile as writeFile2, mkdir as mkdir2, readFile as readFile2 } from "fs/promises"; await writeFile(tarballPath, tarball); await writeFile(systemPromptPath, systemPrompt, { mode: 384 }); var DEFAULT_WORKER_URL = "https://tonty-tech-interviews-relay.tonty-tech-interviews.workers.dev"; await writeFile2(tarballPath, tarball); await writeFile2(join4(workdir, "verify.sh"), verifyScript);

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/chunk-LUQX3KMS.jsView on unpkg

17Cross-file remote execution chain: dist/chunk-LUQX3KMS.js spawns dist/chunk-VLUNXJRG.js; helper contains network access plus dynamic code execution. L17: import { fileURLToPath } from "url"; L18: var __dirname = dirname(fileURLToPath(import.meta.url)); L19: function readVersion() { L20: try { L21: let pkgPath = join(__dirname, "package.json"); L22: let raw; ... L28: } L29: const pkg = JSON.parse(raw); L30: return pkg.version || "0.0.0"; ... L76: console.log( L77: chalk.gray("\u2502") + center(chalk.dim(`v${VERSION} \u2022 https://tonty.app`), W) + chalk.gray("\u2502") L78: );

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-LUQX3KMS.jsView on unpkg · L17

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.61.71 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.61.71 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView on unpkg

21*/ L22: var fs = require("fs"); L23: var path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView on unpkg · L21

dist/chunk-LUQX3KMS.js#virtual:normalized:round1View file

545}).toString(); L546: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L547: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-LUQX3KMS.js#virtual:normalized:round1View on unpkg · L545

545}).toString(); L546: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L547: );

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-LUQX3KMS.js#virtual:normalized:round1View on unpkg · L545

545Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin.js -> dist/chunk-LUQX3KMS.js L545: }).toString(); L546: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L547: );

High

Trigger Reachable Command Output Exfiltration

vendor/node-pty-darwin-x64/build/Release/pty.nodeView file

•path = vendor/node-pty-darwin-x64/build/Release/pty.node kind = native_binary sizeBytes = 52864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty-darwin-x64/build/Release/pty.nodeView on unpkg

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.61.71 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.61.71 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView on unpkg

vendor/node-pty/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.61.71 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.61.71 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/unixTerminal.jsView on unpkg

Source & flagged code

13 flagged

dist/chunk-LUQX3KMS.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2import {

3 SessionManager,

4 detectInstalledProviders,

5 discoverBuiltInScenarios,

6 getLauncher,

7 listSessions,

8 loadSession,

9 saveSession,

10 toStoredSession

11} from "./chunk-VLUNXJRG.js";

12

13// src/ui/display.ts

14import chalk from "chalk";

15import { readFileSync } from "fs";

16import { join, dirname } from "path";

17import { fileURLToPath } from "url";

18var __dirname = dirname(fileURLToPath(import.meta.url));

19function readVersion() {

20 try {

21 let pkgPath = join(__dirname, "package.json");

22 let raw;

23 try {

24 raw = readFileSync(pkgPath, "utf-8");

25 } catch {

26 pkgPath = join(__dirname, "..", "package.json");

27 raw = readFileSync(pkgPath, "utf-8");

28 }

29 const pkg = JSON.parse(raw);

30 return pkg.version || "0.0.0";

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-LUQX3KMS.jsView on unpkg · L17

31 } catch {

32 return "0.0.0";

33 }

34}

35var VERSION = readVersion();

36var W = 58;

37function getVersion() {

Lines 84-124javascript

84 console.log(chalk.bold(" Scenario: ") + chalk.white(name));

85 console.log(chalk.gray(" " + description));

86 console.log(

87 chalk.gray(" Difficulty: ")

Lines 574-614javascript

574 console.log(chalk2.yellow(` ${warning}`));

575 console.log();

576 }

577 if (process.platform === "win32") {

578 console.log(chalk2.red.bold("

•matchType = previous_version_dangerous_delta matchedPackage = tonty-tech-interviews@0.2.64 matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.64 similarity = 0.909 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-LUQX3KMS.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/chunk-LUQX3KMS.js: chalk.gray("\u2502") + center(chalk.dim(`v${VERSION} \u2022 https://tonty.app`), W) + chalk.gray("\u2502") import { writeFile, mkdir } from "fs/promises"; import { writeFile as writeFile2, mkdir as mkdir2, readFile as readFile2 } from "fs/promises"; await writeFile(tarballPath, tarball); await writeFile(systemPromptPath, systemPrompt, { mode: 384 }); var DEFAULT_WORKER_URL = "https://tonty-tech-interviews-relay.tonty-tech-interviews.workers.dev"; await writeFile2(tarballPath, tarball); await writeFile2(join4(workdir, "verify.sh"), verifyScript);

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/chunk-LUQX3KMS.jsView on unpkg

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView file

Lines 1-41javascript

1"use strict";

2var __extends = (this && this.__extends) || (function () {

3 var extendStatics = function (

dist/chunk-LUQX3KMS.js#virtual:normalized:round1View file

545}).toString(); L546: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L547: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-LUQX3KMS.js#virtual:normalized:round1View on unpkg · L545

545}).toString(); L546: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L547: );

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-LUQX3KMS.js#virtual:normalized:round1View on unpkg · L545

545Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin.js -> dist/chunk-LUQX3KMS.js L545: }).toString(); L546: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L547: );

High

Trigger Reachable Command Output Exfiltration

vendor/node-pty-darwin-x64/build/Release/pty.nodeView file

•path = vendor/node-pty-darwin-x64/build/Release/pty.node kind = native_binary sizeBytes = 52864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty-darwin-x64/build/Release/pty.nodeView on unpkg

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.61.71 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.61.71 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView on unpkg

vendor/node-pty/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.61.71 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.61.71 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/unixTerminal.jsView on unpkg