registry / Remote code execution / verdaccio-okta-oauth / 40.2.1

verdaccio-okta-oauth@40.2.1

Verdaccio authentication plugin using Okta OAuth

AI Security Review

scanned 7d ago · by lpm-firewall-ai

Source inspection confirms a reachable shell command injection flaw in the OAuth helper. The CLI is explicitly launched, so this supports a warning for a critical vulnerability rather than a finding of malicious package behavior.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

A request reaches the CLI’s HTTP server on port 8239 while the OAuth helper is active.

Impact

A crafted request can cause shell command execution with the privileges of the CLI process.

Mechanism

The handler accepts npm_token as a string and interpolates it into an execSync command without shell escaping.

AI rationale

Evidence

src/cli.tsdist/cli.jssrc/index.tsnpm configuration for the selected registry

Network endpoints1

localhost:8239

Decision evidence

public snapshot

AI called this Suspicious at 96.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

The package exposes bin/index.js, which imports the compiled CLI.
The CLI accepts npm_token from an HTTP request and checks only that it is a string.
The CLI interpolates npm_token into an execSync shell command without shell escaping.
The OAuth callback sends the token parameter to localhost:8239; the compiled CLI contains the same shell command.

Evidence against

The CLI opens the configured registry’s OAuth authorization endpoint, consistent with its stated authentication purpose.

Behavioral surface

Source

ChildProcessCryptoFilesystemNetworkShell

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 7 file(s), 22.4 KB of source

Source & flagged code

9 flagged

dist/cli.jsView file

Lines 7-44javascript

7import { hideBin } from 'yargs/helpers';

8const argv = yargs(hideBin(process.argv)).argv;

9const registry = ((_argv_registry = argv.registry) !== null && _argv_registry !== void 0 ? _argv_registry : execSync('npm config get registry').toString()).trim().replace(/\/?$/, '/');

10if (registry.includes('registry.npmjs.org')) {

11 throw new Error('This is incompatible with the default npm repository.');

12}

13open(registry + 'oauth/authorize');

14http.createServer((req, res)=>{

15 if (!req.url) {

16 throw new Error('Request URL is not defined!');

17 }

18 const { query: { username, jwt_token, npm_token, redirect_uri } } = url.parse(req.url, true);

19 if (typeof username !== 'string') {

20 throw new Error('"username" should be a string value!');

21 }

22 if (typeof jwt_token !== 'string') {

23 throw new Error('"jwt_token" should be a string value!');

24 }

25 if (typeof npm_token !== 'string') {

26 throw new Error('"npm_token" should be a string value!');

27 }

28 if (typeof redirect_uri !== 'string') {

29 throw new Error('"redirect_uri" should be a string value!');

30 }

31 const { host, pathname } = new URL(registry);

32 execSync(`npm config set --no-workspaces //${host}${pathname}:_authToken "${npm_token}"`);

33 res.writeHead(302, {

34 Location: `${redirect_uri}?${new URLSearchParams({

Medium

Ai Review Evidence

The OAuth callback sends the token parameter to localhost:8239; the compiled CLI contains the same shell command.

dist/cli.jsView on unpkg · L27

35 username,

36 token: jwt_token

37 }).toString()}`

38 });

39 res.end(()=>{

40 process.exit(0);

41 });

42}).listen(8239);

44//# sourceMappingURL=cli.js.map

•matchType = normalized_sha256 matchedPackage = verdaccio-okta-oauth@38.1.6 matchedPath = dist/cli.js matchedIdentity = npm:dmVyZGFjY2lvLW9rdGEtb2F1dGg:38.1.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.jsView on unpkg

src/cli.tsView file

Lines 1-60typescript

1/* eslint-disable @typescript-eslint/naming-convention */

2import { execSync } from 'child_process';

3import http from 'http';

4import open from 'open';

5import url from

package.jsonView file

Lines 1-37json

2 "name": "verdaccio-okta-oauth",

3 "version": "40.2.1",

4 "description": "Verdaccio authentication plugin using Okta OAuth",

5 "type": "module",

bin/index.jsView file

Lines 1-4javascript

1#!/usr/bin/env node

3import('../dist/cli.js');

Medium

Ai Review Evidence

The package exposes bin/index.js, which imports the compiled CLI.

bin/index.jsView on unpkg · L3

src/index.tsView file

Lines 205-257typescript

205 return;

206 }

207

208 let userInfo: UserInfo;

209 try {

210 userInfo = await this.

Source & flagged code

9 flagged · loading source

dist/cli.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.jsView on unpkg

27} if (typeof redirect_uri !== 'string') { throw new Error('"redirect_uri" should be a string value!'); } const { host, pathname } = new URL(registry); execSync(`npm config set --no-workspaces //${host}${pathname}:_authToken "${npm_token}"`); res.writeHead(302, { Location: `${redirect_uri}?

Medium

Ai Review Evidence

The OAuth callback sends the token parameter to localhost:8239; the compiled CLI contains the same shell command.

dist/cli.jsView on unpkg · L27

src/cli.tsView file

•matchType = normalized_sha256 matchedPackage = verdaccio-okta-oauth@38.1.6 matchedPath = src/cli.ts matchedIdentity = npm:dmVyZGFjY2lvLW9rdGEtb2F1dGg:38.1.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

Findings

2 High8 Medium2 Low

HighKnown Malware Source Similaritydist/cli.js

HighKnown Malware Source Similaritysrc/cli.ts

MediumNetwork

MediumAi Review Evidencepackage.json

MediumAi Review Evidencebin/index.js

MediumAi Review Evidencesrc/cli.ts

MediumAi Review Evidencedist/cli.js

MediumAi Review Evidencesrc/index.ts

LowFilesystem

LowNo License

Affected versions and remediation

This report applies to verdaccio-okta-oauth@40.2.1.

See all versions of verdaccio-okta-oauth for other recorded verdicts.

Review the evidence and your use of verdaccio-okta-oauth@40.2.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-16 12:39:43.225Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.