AI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for block
- index.js imports node:child_process and calls spawn.
- index.js uses fetch against the caller-supplied server URL.
- provider() starts a persistent shell and forwards shell I/O.
- index.d.ts exposes the shell as ChildProcess.
- index.js is heavily obfuscated and includes dynamic Function construction.
Evidence against
- package.json has no preinstall/install/postinstall hooks.
- Remote shell behavior requires explicit provider(serverUrl) invocation.
- README.md documents supplying a server URL and stopping the handle.
- No fixed external endpoint, credential harvesting, or file writes were confirmed.
Behavioral surface
SourceNo risky source behavior triggered.
Supply chainHighEntropyStringsMinifiedObfuscatedTrivial
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 112 KB of source