registry / triage_bot_using_sdkv3 / 2.0.1

triage_bot_using_sdkv3@2.0.1

AI Security Review

scanned 16h ago · by lpm-firewall-ai

npm installation runs index.js through the preinstall lifecycle hook. The script harvests host identifiers and Unix system files, then exfiltrates them over HTTPS.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm install (preinstall lifecycle)

Impact

Exposes installation host identity, DNS configuration, and contents of /etc/passwd and /etc/hosts to a remote endpoint.

Mechanism

install-time host-data harvesting and HTTPS exfiltration

Attack narrative

During npm installation, package.json runs index.js as preinstall. The entrypoint collects host and user identity details, DNS server configuration, and reads /etc/passwd and /etc/hosts if available. It serializes this data and sends it in an HTTPS POST request to a Burp Collaborator-style oastify.com endpoint without user interaction or consent.

Rationale

Direct inspection confirms a concrete install-time data-exfiltration chain with no apparent package-aligned functionality. This is malicious behavior, not merely a suspicious primitive.

Evidence

package.jsonindex.js

Network endpoints1

mh7rhchf58lgymyr9wffhwfprgx7lx9m.oastify.com

Decision evidence

public snapshot

AI called this at 99.0% confidence with false-positive risk.

triage_bot_using_sdkv3@2.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code