Loading npm security reports…

tonty-tech-interviews@0.2.75: Malicious npm security report | LPM Firewall

registry / tonty-tech-interviews / 0.2.75

tonty-tech-interviews@0.2.75

CLI for Tonty Talents technical candidate evaluation — evaluate how engineers work with AI

AI Security Review

scanned 25d ago · by lpm-firewall-ai

Joining a cloud session accepts remote-controlled setup commands and a remote verification script. It executes commands locally and uploads session recordings to the package relay.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

The user runs the CLI join command with a cloud session code.

Impact

A relay operator or compromised relay can run arbitrary commands in the joining user's account and receive captured terminal-session data.

Mechanism

Remote session data is executed as shell commands and bash code.

Attack narrative

A user who joins a cloud session causes the CLI to download metadata from the configured relay. The metadata supplies setupCommands, which are passed directly to execSync. The relay can also supply verify.sh, which the package later executes with bash. The package then uploads terminal recording events and session data back to that relay. This gives the remote service code execution and collection capability on the participant's machine without command allowlisting or signature verification.

AI rationale

The package contains a concrete remote-code-execution path: cloud-controlled values reach shell execution, and a relay-provided script is later run with bash. The absence of an install lifecycle hook does not mitigate this user-triggered attack surface.

Evidence

dist/chunk-GRIBIZUB.jsdist/chunk-BSOKQ6G3.jsverify.sh~/.tonty-tech-interviews/prompts

Network endpoints1

/sessions

Source & flagged code

14 flagged · loading source

dist/chunk-GRIBIZUB.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = tonty-tech-interviews@0.2.77 matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.77 similarity = 0.864 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-GRIBIZUB.jsView on unpkg

104// src/commands/index.ts L105: import { execFileSync as execFileSync5 } from "child_process"; L106: import { appendFile, mkdir as mkdir3, readFile as readFile4 } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/chunk-GRIBIZUB.jsView on unpkg · L104

651); L652: console.log(chalk2.cyan(" Depuis PowerShell : wsl --install -d Ubuntu")); L653: console.log(

High

Shell

Package source references shell execution.

dist/chunk-GRIBIZUB.jsView on unpkg · L651

17Cross-file remote execution chain: dist/chunk-GRIBIZUB.js spawns dist/chunk-BSOKQ6G3.js; helper contains network access plus dynamic code execution. L17: import { fileURLToPath } from "url"; L18: var __dirname = dirname(fileURLToPath(import.meta.url)); L19: function readVersion() { L20: try { L21: let pkgPath = join(__dirname, "package.json"); L22: let raw; ... L28: } L29: const pkg = JSON.parse(raw); L30: return pkg.version || "0.0.0"; ... L76: console.log( L77: chalk.gray("\u2502") + center(chalk.dim(`v${VERSION} \u2022 https://tonty.app`), W) + chalk.gray("\u2502") L78: );

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-GRIBIZUB.jsView on unpkg · L17

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.73 matchedPath = dist/chunk-PW7XUOJD.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.73 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-GRIBIZUB.jsView on unpkg

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.78 matchedPath = vendor/node-pty-darwin-arm64/lib/unixTerminal.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.78 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView on unpkg

31*/ L32: var fs = require('fs') L33: var path = require('path')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView on unpkg · L31

dist/chunk-GRIBIZUB.js#virtual:normalized:round1View file

578}).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-GRIBIZUB.js#virtual:normalized:round1View on unpkg · L578

578}).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-GRIBIZUB.js#virtual:normalized:round1View on unpkg · L578

578Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin.js -> dist/chunk-GRIBIZUB.js L578: }).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Trigger Reachable Command Output Exfiltration

vendor/node-pty-darwin-x64/build/Release/pty.nodeView file

•path = vendor/node-pty-darwin-x64/build/Release/pty.node kind = native_binary sizeBytes = 52864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty-darwin-x64/build/Release/pty.nodeView on unpkg

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.78 matchedPath = vendor/node-pty-darwin-arm64/lib/unixTerminal.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.78 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView on unpkg

vendor/node-pty/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.78 matchedPath = vendor/node-pty-darwin-arm64/lib/unixTerminal.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.78 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/unixTerminal.jsView on unpkg

Source & flagged code

14 flagged

dist/chunk-GRIBIZUB.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2import {

3 SessionManager,

4 detectInstalledProviders,

5 discoverBuiltInScenarios,

6 getLauncher,

7 listSessions,

8 loadSession,

9 saveSession,

10 toStoredSession

11} from "./chunk-BSOKQ6G3.js";

12

13// src/ui/display.ts

14import chalk from "chalk";

15import { readFileSync } from "fs";

16import { join, dirname } from "path";

17import { fileURLToPath } from "url";

18var __dirname = dirname(fileURLToPath(import.meta.url));

19function readVersion() {

20 try {

21 let pkgPath = join(__dirname, "package.json");

22 let raw;

23 try {

24 raw = readFileSync(pkgPath, "utf-8");

25 } catch {

26 pkgPath = join(__dirname, "..", "package.json");

27 raw = readFileSync(pkgPath, "utf-8");

28 }

29 const pkg = JSON.parse(raw);

30 return pkg.version || "0.0.0";

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-GRIBIZUB.jsView on unpkg · L17

31 } catch {

32 return "0.0.0";

33 }

34}

35var VERSION = readVersion();

36var W = 58;

37function getVersion() {

Lines 84-124javascript

84 console.log(chalk.bold(" Scenario: ") + chalk.white(name));

85 console.log(chalk.gray(" " + description));

86 console.log(

87 chalk.gray(" Difficulty: ")

Lines 631-671javascript

631 console.log(chalk2.yellow(` ${warning}`));

632 console.log();

633 }

634 if (process.platform === "win32") {

635 console.log(chalk2.red.bold("

•matchType = previous_version_dangerous_delta matchedPackage = tonty-tech-interviews@0.2.77 matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.77 similarity = 0.864 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-GRIBIZUB.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.73 matchedPath = dist/chunk-PW7XUOJD.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.73 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-GRIBIZUB.jsView on unpkg

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView file

Lines 11-51javascript

11 }) ||

12 function (d, b) {

13 for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]

14 }

dist/chunk-GRIBIZUB.js#virtual:normalized:round1View file

578}).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-GRIBIZUB.js#virtual:normalized:round1View on unpkg · L578

578}).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-GRIBIZUB.js#virtual:normalized:round1View on unpkg · L578

578Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin.js -> dist/chunk-GRIBIZUB.js L578: }).toString(); L579: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L580: );

High

Trigger Reachable Command Output Exfiltration

vendor/node-pty-darwin-x64/build/Release/pty.nodeView file

•path = vendor/node-pty-darwin-x64/build/Release/pty.node kind = native_binary sizeBytes = 52864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty-darwin-x64/build/Release/pty.nodeView on unpkg

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.78 matchedPath = vendor/node-pty-darwin-arm64/lib/unixTerminal.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.78 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView on unpkg

vendor/node-pty/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.78 matchedPath = vendor/node-pty-darwin-arm64/lib/unixTerminal.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.78 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/unixTerminal.jsView on unpkg