Loading npm security reports…

tonty-tech-interviews@0.2.78: Malicious npm security report | LPM Firewall

registry / tonty-tech-interviews / 0.2.78

tonty-tech-interviews@0.2.78

CLI for Tonty Talents technical candidate evaluation — evaluate how engineers work with AI

AI Security Review

scanned 27d ago · by lpm-firewall-ai

Running the join command with a cloud session code downloads server-controlled metadata and executes its setup commands. It records keystrokes and terminal output from the launched AI tool, then uploads them to the relay.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

A user runs tonty-tech-interviews join with a cloud session code.

Impact

A relay operator can run commands in the session workspace and receive sensitive terminal input and output.

Mechanism

Remote command execution and terminal-recording exfiltration.

Attack narrative

The join command downloads cloud-session metadata. The metadata can contain setup commands, which are passed to shell execution in the candidate workspace. The package proxies user input and AI-provider terminal output through a recorder. When the session completes, it uploads the recording and session data to the configured relay. This enables a remote party controlling the session to run commands and collect terminal content that may include credentials or private source data.

AI rationale

The explicit join flow combines server-controlled shell commands with collection and upload of full terminal interaction. This is a concrete remote-code-execution and data-exfiltration capability, despite requiring a user-invoked CLI command.

Evidence

dist/chunk-VHF6JTYK.jsdist/chunk-SVI4DMWC.js~/.tonty-tech-interviews/prompts/<id>.md~/.tonty-tech-interviews/recordings/<sessionId>.json~/tonty-sessions/<scenario>-<id>

Network endpoints1

Source & flagged code

12 flagged · loading source

dist/chunk-VHF6JTYK.jsView file

105// src/commands/index.ts L106: import { execFileSync as execFileSync5 } from "child_process"; L107: import { appendFile, mkdir as mkdir3, readFile as readFile4 } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/chunk-VHF6JTYK.jsView on unpkg · L105

777); L778: console.log(chalk2.cyan(" Depuis PowerShell : wsl --install -d Ubuntu")); L779: console.log(

High

Shell

Package source references shell execution.

dist/chunk-VHF6JTYK.jsView on unpkg · L777

18import { fileURLToPath } from "url"; L19: var __dirname = dirname(fileURLToPath(import.meta.url)); L20: function readVersion() { L21: try { L22: let pkgPath = join(__dirname, "package.json"); L23: let raw; ... L29: } L30: const pkg = JSON.parse(raw); L31: return pkg.version || "0.0.0"; ... L77: console.log( L78: chalk.gray("\u2502") + center(chalk.dim(`v${VERSION} \u2022 https://tonty.app`), W) + chalk.gray("\u2502") L79: );

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-VHF6JTYK.jsView on unpkg · L18

18Cross-file remote execution chain: dist/chunk-VHF6JTYK.js spawns dist/chunk-SVI4DMWC.js; helper contains network access plus dynamic code execution. L18: import { fileURLToPath } from "url"; L19: var __dirname = dirname(fileURLToPath(import.meta.url)); L20: function readVersion() { L21: try { L22: let pkgPath = join(__dirname, "package.json"); L23: let raw; ... L29: } L30: const pkg = JSON.parse(raw); L31: return pkg.version || "0.0.0"; ... L77: console.log( L78: chalk.gray("\u2502") + center(chalk.dim(`v${VERSION} \u2022 https://tonty.app`), W) + chalk.gray("\u2502") L79: );

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-VHF6JTYK.jsView on unpkg · L18

18Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin.js -> dist/chunk-VHF6JTYK.js L18: import { fileURLToPath } from "url"; L19: var __dirname = dirname(fileURLToPath(import.meta.url)); L20: function readVersion() { L21: try { L22: let pkgPath = join(__dirname, "package.json"); L23: let raw; ... L29: } L30: const pkg = JSON.parse(raw); L31: return pkg.version || "0.0.0"; ... L77: console.log( L78: chalk.gray("\u2502") + center(chalk.dim(`v${VERSION} \u2022 https://tonty.app`), W) + chalk.gray("\u2502") L79: );

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/chunk-VHF6JTYK.jsView on unpkg · L18

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.73 matchedPath = vendor/node-pty-darwin-arm64/lib/unixTerminal.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.73 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView on unpkg

31*/ L32: var fs = require('fs') L33: var path = require('path')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView on unpkg · L31

dist/chunk-VHF6JTYK.js#virtual:normalized:round1View file

586}).toString(); L587: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L588: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-VHF6JTYK.js#virtual:normalized:round1View on unpkg · L586

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-VHF6JTYK.js#virtual:normalized:round1View on unpkg

vendor/node-pty-darwin-x64/build/Release/pty.nodeView file

•path = vendor/node-pty-darwin-x64/build/Release/pty.node kind = native_binary sizeBytes = 52864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty-darwin-x64/build/Release/pty.nodeView on unpkg

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.73 matchedPath = vendor/node-pty-darwin-arm64/lib/unixTerminal.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.73 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView on unpkg

vendor/node-pty/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.73 matchedPath = vendor/node-pty-darwin-arm64/lib/unixTerminal.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.73 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/unixTerminal.jsView on unpkg

Source & flagged code

12 flagged

dist/chunk-VHF6JTYK.jsView file

Lines 1-38javascript

1#!/usr/bin/env node

2import {

3 SessionManager,

4 detectBannedEditor,

5 detectInstalledProviders,

6 discoverBuiltInScenarios,

7 getLauncher,

8 listSessions,

9 loadSession,

10 saveSession,

11 toStoredSession

12} from "./chunk-SVI4DMWC.js";

13

14// src/ui/display.ts

15import chalk from "chalk";

16import { readFileSync } from "fs";

17import { join, dirname } from "path";

18import { fileURLToPath } from "url";

19var __dirname = dirname(fileURLToPath(import.meta.url));

20function readVersion() {

21 try {

22 let pkgPath = join(__dirname, "package.json");

23 let raw;

24 try {

25 raw = readFileSync(pkgPath, "utf-8");

26 } catch {

27 pkgPath = join(__dirname, "..", "package.json");

28 raw = readFileSync(pkgPath, "utf-8");

29 }

30 const pkg = JSON.parse(raw);

31 return pkg.version || "0.0.0";

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-VHF6JTYK.jsView on unpkg · L18

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-VHF6JTYK.jsView on unpkg · L18

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/chunk-VHF6JTYK.jsView on unpkg · L18

32 } catch {

33 return "0.0.0";

34 }

35}

36var VERSION = readVersion();

37var W = 58;

38function getVersion() {

Lines 85-125javascript

85 console.log(chalk.bold(" Scenario: ") + chalk.white(name));

86 console.log(chalk.gray(" " + description));

87 console.log(

88 chalk.gray(" Difficulty: ")

Lines 757-797javascript

757 console.log(chalk2.yellow(` ${warning}`));

758 console.log();

759 }

760 if (process.platform === "win32") {

761 console.log(chalk2.red.bold("

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView file

Lines 11-51javascript

11 }) ||

12 function (d, b) {

13 for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]

14 }

dist/chunk-VHF6JTYK.js#virtual:normalized:round1View file

586}).toString(); L587: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L588: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-VHF6JTYK.js#virtual:normalized:round1View on unpkg · L586

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-VHF6JTYK.js#virtual:normalized:round1View on unpkg

vendor/node-pty-darwin-x64/build/Release/pty.nodeView file

•path = vendor/node-pty-darwin-x64/build/Release/pty.node kind = native_binary sizeBytes = 52864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty-darwin-x64/build/Release/pty.nodeView on unpkg

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.73 matchedPath = vendor/node-pty-darwin-arm64/lib/unixTerminal.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.73 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView on unpkg

vendor/node-pty/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = tonty-tech-interviews@0.2.73 matchedPath = vendor/node-pty-darwin-arm64/lib/unixTerminal.js matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.73 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/unixTerminal.jsView on unpkg