verdaccio-okta-oauth@40.0.0: Remote code execution – flagged

AI Security Review

scanned 12d ago · by lpm-firewall-ai

The manifest exposes a user-invoked CLI without install hooks, but its callback contains a concrete shell-injection vulnerability reachable through its HTTP listener. This warrants a warning for remote code execution risk; the inspected source does not establish malicious intent or an automatic attack.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

A user invokes the CLI and it starts its local HTTP callback listener; the issue is triggered by a crafted request to that listener.

Impact

Successful injection can run commands with the privileges of the CLI process and alter npm configuration.

Mechanism

The callback takes npm_token from the query string and interpolates it inside a double-quoted argument to execSync.

AI rationale

The manifest exposes a user-invoked CLI without install hooks, but its callback contains a concrete shell-injection vulnerability reachable through its HTTP listener. This warrants a warning for remote code execution risk; the inspected source does not establish malicious intent or an automatic attack.

Evidence

src/cli.tsdist/cli.js

Network endpoints1

localhost:8239

Decision evidence

public snapshot

AI called this Suspicious at 96.0% confidence as Critical Vulnerability with medium false-positive risk.

Evidence for warning

The CLI is exposed as a package binary and opens the configured registry's OAuth authorization route.
While the CLI runs, its HTTP handler accepts a request-supplied token and inserts it into a shell command without escaping it.
The auth callback redirects to the CLI listener on localhost with the token in the query string.
The same unsafe token interpolation appears in the distributed CLI bundle.

Evidence against

The manifest has no install lifecycle hook; the risky CLI code runs when the binary is invoked.
The registry authorization flow uses the configured registry and Okta issuer.

Behavioral surface

Source

ChildProcessCryptoFilesystemNetworkShell

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 7 file(s), 22.4 KB of source

Source & flagged code

7 flagged

dist/cli.jsView file

•matchType = normalized_sha256 matchedPackage = verdaccio-okta-oauth@38.1.6 matchedPath = dist/cli.js matchedIdentity = npm:dmVyZGFjY2lvLW9rdGEtb2F1dGg:38.1.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.jsView on unpkg

31const { host, pathname } = new URL(registry); execSync(`npm config set --no-workspaces //${host}${pathname}:_authToken "${npm_token}"`); res.writeHead(302, { Location: `${redirect_uri}?${new URLSearchParams({

Medium

Ai Review Evidence

While the CLI runs, its HTTP handler accepts a request-supplied token and inserts it into a shell command without escaping it.

dist/cli.jsView on unpkg · L31

src/cli.tsView file

•matchType = normalized_sha256 matchedPackage = verdaccio-okta-oauth@38.1.6 matchedPath = src/cli.ts matchedIdentity = npm:dmVyZGFjY2lvLW9rdGEtb2F1dGg:38.1.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli.tsView on unpkg

46const { host, pathname } = new URL(registry); execSync(`npm config set --no-workspaces //${host}${pathname}:_authToken "${npm_token}"`); res.writeHead(302, { Location: `${redirect_uri}?${new URLSearchPar

Medium

Ai Review Evidence

While the CLI runs, its HTTP handler accepts a request-supplied token and inserts it into a shell command without escaping it.

src/cli.tsView on unpkg · L46

19open(registry + 'oauth/authorize'); http.createServer((req, res) => { if (!req.url) { throw new Error('Request URL is not defined!'); } const { query: { username, jwt_token, npm_token, redirect_uri }, } = url.parse(req.url, true); if (typeof username

Medium

Ai Review Evidence

While the CLI runs, its HTTP handler accepts a request-supplied token and inserts it into a shell command without escaping it.

src/cli.tsView on unpkg · L19

package.jsonView file

12"files": [ "bin", "dist", "src" ], "bin": "./bin/index.js", "devDependencies": { "@types/exp

Medium

Stripped Provenance Metadata

The CLI is exposed as a package binary and opens the configured registry's OAuth authorization route.

package.jsonView on unpkg · L12

src/index.tsView file

227res.redirect( `http://localhost:8239?${new URLSearchParams({ username, jwt_token: await auth.jwtEncrypt( { name: username, groups: [...groups, ...defaultLoggedUserRoles], rea

Medium

Ai Review Evidence

The auth callback redirects to the CLI listener on localhost with the token in the query string.

src/index.tsView on unpkg · L227

Source & flagged code

7 flagged · loading source

dist/cli.jsView file

•matchType = normalized_sha256 matchedPackage = verdaccio-okta-oauth@38.1.6 matchedPath = dist/cli.js matchedIdentity = npm:dmVyZGFjY2lvLW9rdGEtb2F1dGg:38.1.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.jsView on unpkg

31const { host, pathname } = new URL(registry); execSync(`npm config set --no-workspaces //${host}${pathname}:_authToken "${npm_token}"`); res.writeHead(302, { Location: `${redirect_uri}?${new URLSearchParams({

Medium

Ai Review Evidence

While the CLI runs, its HTTP handler accepts a request-supplied token and inserts it into a shell command without escaping it.

dist/cli.jsView on unpkg · L31

src/cli.tsView file

•matchType = normalized_sha256 matchedPackage = verdaccio-okta-oauth@38.1.6 matchedPath = src/cli.ts matchedIdentity = npm:dmVyZGFjY2lvLW9rdGEtb2F1dGg:38.1.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

Findings

2 High6 Medium2 Low

HighKnown Malware Source Similaritydist/cli.js

HighKnown Malware Source Similaritysrc/cli.ts

MediumNetwork

MediumStripped Provenance Metadatapackage.json

MediumAi Review Evidencesrc/cli.ts

MediumAi Review Evidencesrc/index.ts

MediumAi Review Evidencedist/cli.js

MediumAi Review Evidencesrc/cli.ts

LowFilesystem

LowNo License

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Behavioral surface

Source & flagged code