registry / Remote code execution / type-slint
type-slint
This document describes the management of vulnerabilities for the project and all modules within the organization.
This report shows the evidence for type-slint@3.3.7. 2 of 2 known versions are blocked or flagged. The newest version, 3.3.8, is blocked. See all versions.
AI Security Review
scanned 4mo ago · by lpm-firewall-aiSource inspection confirms a non-package-aligned hidden downloader/evaluator path from index.js to lib/caller.js. This is concrete malicious runtime remote code execution, not just a noisy static signal.
Static reason
One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
User/application imports package and invokes exported middleware function
Impact
Arbitrary remote JavaScript can execute in the consuming project environment with Node require access
Mechanism
detached child process downloads and evaluates remote payload
Attack narrative
The package presents copied pino-like files, but index.js exports a middleware wrapper that secretly spawns a detached Node child. That child runs lib/caller.js, fetches code from an IPFS gateway, extracts a cookie field, and evaluates it with Function.constructor while passing require, enabling arbitrary remote payload execution when the package API is used.
AI rationale
Source inspection confirms a non-package-aligned hidden downloader/evaluator path from index.js to lib/caller.js. This is concrete malicious runtime remote code execution, not just a noisy static signal.
Evidence
package.jsonindex.jslib/caller.jsfile.js
Network endpoints1
bronze-improved-gibbon-411.mypinata.cloud/ipfs/bafkreigjnxn5vnn34rc5r43ajwwkmk4akqpm4awmq5gdhakgszpeqiffsu
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- index.js exports middleware that spawns detached node process running ./lib/caller.js when invoked
- lib/caller.js fetches remote data from mypinata.cloud IPFS URL with axios
- lib/caller.js reads response .data.cookie and executes it via new Function.constructor('require', s)
- README/docs appear copied from pino while package name/manifest do not match that codebase
- package.json adds axios/request/sqlite3 dependencies despite no package-aligned functionality requiring them
Evidence against
- package.json has no preinstall/install/postinstall lifecycle hooks
- No direct credential or filesystem harvesting is visible in inspected source before remote payload execution
Behavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
2 flagged · loading sourceindex.jsView file
•matchType = malicious_source_fingerprint_signature
signature = 2ad508fc9ea2882e
signatureType = suspicious_hashes
sourceLabel = OpenSSF malicious-packages
matchedPackage = tslint-conf@7.2.1
matchedPath = index.js
matchedIdentity = npm:dHNsaW50LWNvbmY:7.2.1
similarity = 1.000
shingleOverlap = 12
summary = Malicious code in tslint-conf (npm)
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
index.jsView on unpkgdocs/transports.mdView file
550patternName = generic_password
severity = medium
line = 550
matchedText = password...rd',
Medium
Findings
2 High3 Medium3 Low
HighEval
HighKnown Malware Source Fingerprint Signatureindex.js
MediumNetwork
MediumEnvironment Vars
MediumSecret Patterndocs/transports.md
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to type-slint@3.3.7.
The versions list below shows the verdict for each recorded version.
- Avoid installing type-slint@3.3.7. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.