Loading npm security reports…

tonty-tech-interviews@0.2.73: Malicious npm security report | LPM Firewall

registry / tonty-tech-interviews / 0.2.73

tonty-tech-interviews@0.2.73

CLI for Tonty Talents technical candidate evaluation — evaluate how engineers work with AI

AI Security Review

scanned 2h ago · by lpm-firewall-ai

The user-invoked remote-session workflow accepts server-provided shell commands and a verification script, then executes them in a workspace. It also sends session recordings to the package relay.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Running tonty-tech-interviews join with a remote session code.

Impact

A relay operator or compromised relay can execute arbitrary commands in the user's session workspace and receive recorded session data.

Mechanism

Remote command delivery, shell execution, and recording upload.

Attack narrative

The join command obtains remote metadata from the configured relay. That metadata can contain setup commands, which the package executes through execSync. It also downloads a relay-provided verify.sh into the workspace; the session manager later runs an available verify.sh with Bash. The same workflow uploads recording data to the relay. Although this is not automatic at npm install, the remote service controls executable content after a normal user command.

Rationale

The package gives a remote relay direct control over shell commands and a Bash script executed on the user's machine, while uploading recorded session data. This is concrete remote code execution and data-exfiltration behavior.

Evidence

dist/bin.jsdist/chunk-PW7XUOJD.jsdist/chunk-CJYSWPM3.jsverify.shworkspace.tar.gz

Network endpoints1

tonty-tech-interviews-relay.tonty-tech-interviews.workers.dev

Source & flagged code

10 flagged · loading source

dist/chunk-PW7XUOJD.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = tonty-tech-interviews@0.2.72 matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.72 similarity = 0.955 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-PW7XUOJD.jsView on unpkg

104// src/commands/index.ts L105: import { execFileSync as execFileSync5 } from "child_process"; L106: import { appendFile, mkdir as mkdir3, readFile as readFile4 } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/chunk-PW7XUOJD.jsView on unpkg · L104

651); L652: console.log(chalk2.cyan(" Depuis PowerShell : wsl --install -d Ubuntu")); L653: console.log(

High

Shell

Package source references shell execution.

dist/chunk-PW7XUOJD.jsView on unpkg · L651

17Cross-file remote execution chain: dist/chunk-PW7XUOJD.js spawns dist/chunk-CJYSWPM3.js; helper contains network access plus dynamic code execution. L17: import { fileURLToPath } from "url"; L18: var __dirname = dirname(fileURLToPath(import.meta.url)); L19: function readVersion() { L20: try { L21: let pkgPath = join(__dirname, "package.json"); L22: let raw; ... L28: } L29: const pkg = JSON.parse(raw); L30: return pkg.version || "0.0.0"; ... L76: console.log( L77: chalk.gray("\u2502") + center(chalk.dim(`v${VERSION} \u2022 https://tonty.app`), W) + chalk.gray("\u2502") L78: );

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-PW7XUOJD.jsView on unpkg · L17

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView file

31*/ L32: var fs = require('fs') L33: var path = require('path')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView on unpkg · L31

dist/chunk-PW7XUOJD.js#virtual:normalized:round1View file

578}).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-PW7XUOJD.js#virtual:normalized:round1View on unpkg · L578

578}).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-PW7XUOJD.js#virtual:normalized:round1View on unpkg · L578

578Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin.js -> dist/chunk-PW7XUOJD.js L578: }).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Trigger Reachable Command Output Exfiltration

vendor/node-pty-darwin-x64/build/Release/pty.nodeView file

•path = vendor/node-pty-darwin-x64/build/Release/pty.node kind = native_binary sizeBytes = 52864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty-darwin-x64/build/Release/pty.nodeView on unpkg

Source & flagged code

10 flagged

dist/chunk-PW7XUOJD.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2import {

3 SessionManager,

4 detectInstalledProviders,

5 discoverBuiltInScenarios,

6 getLauncher,

7 listSessions,

8 loadSession,

9 saveSession,

10 toStoredSession

11} from "./chunk-CJYSWPM3.js";

12

13// src/ui/display.ts

14import chalk from "chalk";

15import { readFileSync } from "fs";

16import { join, dirname } from "path";

17import { fileURLToPath } from "url";

18var __dirname = dirname(fileURLToPath(import.meta.url));

19function readVersion() {

20 try {

21 let pkgPath = join(__dirname, "package.json");

22 let raw;

23 try {

24 raw = readFileSync(pkgPath, "utf-8");

25 } catch {

26 pkgPath = join(__dirname, "..", "package.json");

27 raw = readFileSync(pkgPath, "utf-8");

28 }

29 const pkg = JSON.parse(raw);

30 return pkg.version || "0.0.0";

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-PW7XUOJD.jsView on unpkg · L17

31 } catch {

32 return "0.0.0";

33 }

34}

35var VERSION = readVersion();

36var W = 58;

37function getVersion() {

Lines 84-124javascript

84 console.log(chalk.bold(" Scenario: ") + chalk.white(name));

85 console.log(chalk.gray(" " + description));

86 console.log(

87 chalk.gray(" Difficulty: ")

Lines 631-671javascript

631 console.log(chalk2.yellow(` ${warning}`));

632 console.log();

633 }

634 if (process.platform === "win32") {

635 console.log(chalk2.red.bold("

•matchType = previous_version_dangerous_delta matchedPackage = tonty-tech-interviews@0.2.72 matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.72 similarity = 0.955 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-PW7XUOJD.jsView on unpkg

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView file

Lines 11-51javascript

11 }) ||

12 function (d, b) {

13 for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]

14 }

dist/chunk-PW7XUOJD.js#virtual:normalized:round1View file

578}).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-PW7XUOJD.js#virtual:normalized:round1View on unpkg · L578

578}).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-PW7XUOJD.js#virtual:normalized:round1View on unpkg · L578

578Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin.js -> dist/chunk-PW7XUOJD.js L578: }).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Trigger Reachable Command Output Exfiltration

vendor/node-pty-darwin-x64/build/Release/pty.nodeView file

•path = vendor/node-pty-darwin-x64/build/Release/pty.node kind = native_binary sizeBytes = 52864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty-darwin-x64/build/Release/pty.nodeView on unpkg