verdaccio-okta-oauth@40.2.0
Verdaccio authentication plugin using Okta OAuth
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe CLI has a reachable command injection vulnerability: request-controlled input flows into a shell command without safe argument handling. This supports a critical vulnerability warning, but source inspection does not establish that the package deliberately exploits it.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Run the CLI and send an HTTP request to its listener on port 8239 while it is active.
Impact
A reachable attacker may execute commands with the CLI user's privileges and alter the npm configuration.
Mechanism
The listener reads npm_token from the request query and interpolates it into a double-quoted command executed with execSync, without authenticating the request or safely separating command arguments.
AI rationale
The CLI has a reachable command injection vulnerability: request-controlled input flows into a shell command without safe argument handling. This supports a critical vulnerability warning, but source inspection does not establish that the package deliberately exploits it.
Evidence
package.jsonbin/index.jssrc/cli.tsdist/cli.jssrc/index.ts
Network endpoints1
localhost:8239
Decision evidence
public snapshotAI called this Suspicious at 98.0% confidence as Critical Vulnerability with medium false-positive risk.
Evidence for warning
- The manifest exposes bin/index.js, which loads dist/cli.js when the CLI is invoked.
- The CLI parses npm_token from an HTTP request query and only checks that it is a string.
- The handler inserts that request value into a shell command passed to execSync without shell-safe argument handling.
- The normal OAuth callback targets localhost:8239 and generates npm_token from the username and refresh token; the listener does not verify that a request came from this callback.
- The built CLI contains the same listener and shell command, which targets the configured registry.
Evidence against
- The CLI's token configuration command is scoped to the configured registry host and path, consistent with its registry authentication purpose.
Behavioral surface
ChildProcessCryptoFilesystemNetworkShell
NoLicense
Source & flagged code
9 flagged · loading sourcedist/cli.jsView file
•matchType = normalized_sha256
matchedPackage = verdaccio-okta-oauth@38.1.6
matchedPath = dist/cli.js
matchedIdentity = npm:dmVyZGFjY2lvLW9rdGEtb2F1dGg:38.1.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cli.jsView on unpkg14http.createServer((req, res)=>{
if (!req.url) {
throw new Error('Request URL is not defined!');
}
const { query: { username, jwt_token, npm_token, redirect_uri } } = url.parse(req.url, true);
if (typeof username !== 'string') {
throw new Error('"username" should be a string value!');
}
if (typeof jwt_token !== 'string') {
throw new Error('"jwt_token" should be a string value!');
}
if (typeof npm_token !== 'string') {
throw new Error('"npm_token" should be a string value!');
}
if (typeof redirect_uri !== 'string') {
Medium
Ai Review Evidence
The CLI parses npm_token from an HTTP request query and only checks that it is a string.
dist/cli.jsView on unpkg · L1431const { host, pathname } = new URL(registry);
execSync(`npm config set --no-workspaces //${host}${pathname}:_authToken "${npm_token}"`);
res.writeHead(302, {
Location: `${redirect_uri}?${new URLSearchParams({
username,
token: jwt_token
}).toString()}`
});
res.end(()=>{
process.exit(0);
});
}).listen(8239);
//# sourceMappingURL=cli.js.map
Findings
2 High8 Medium2 Low
HighKnown Malware Source Similaritydist/cli.js
HighKnown Malware Source Similaritysrc/cli.ts
MediumNetwork
MediumAi Review Evidencepackage.json
MediumAi Review Evidencebin/index.js
MediumAi Review Evidencesrc/cli.ts
MediumAi Review Evidencesrc/cli.ts
MediumAi Review Evidencedist/cli.js
MediumAi Review Evidencesrc/cli.ts
MediumAi Review Evidencedist/cli.js
LowFilesystem
LowNo License
Affected versions and remediation
This report applies to verdaccio-okta-oauth@40.2.0.
See all versions of verdaccio-okta-oauth for other recorded verdicts.
- Review the evidence and your use of verdaccio-okta-oauth@40.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.