registry / Persistence / webpackbootstrap5
webpackbootstrap5
bootstrap assets for Webpacks runtime.
This report shows the evidence for webpackbootstrap5@5.0.0. 1 of 3 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has no npm lifecycle hook, but its declared main entrypoint performs unconsented browser-side persistence and ships an obfuscated remote loader. This is concrete malicious behavior, not an inert asset.
Static reason
No blocking static signals were detected.
Trigger
A browser loads the package's declared SVG entrypoint.
Impact
The package can control requests within its path scope and execute attacker-selected browser code.
Mechanism
Automatic service-worker persistence and obfuscated remote script loading.
Attack narrative
The package disguises active browser code as its main SVG. When that SVG is loaded, it registers a service worker scoped to the containing path; the worker claims clients and intercepts fetches. A separate obfuscated asset reconstructs script URLs and appends them to the page, enabling remote code delivery. These behaviors are unrelated to the stated bootstrap-assets purpose and create browser persistence and code-execution capability.
AI rationale
The package has no npm lifecycle hook, but its declared main entrypoint performs unconsented browser-side persistence and ships an obfuscated remote loader. This is concrete malicious behavior, not an inert asset.
Evidence
logo-b2b3e4d75f89f6104a35c1c7a5972ddd1be2cf72.svgindex-n6q3m5.jsindex-z2b7r4.js
Network endpoints3
cdn.jsdelivr.netscript.google.coms3.amazonaws.com
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- The declared main file is an SVG that contains active browser scripts, not a bootstrap asset.
- Loading that SVG automatically registers a service worker for its containing path.
- The service worker immediately takes control of clients and intercepts matching fetches.
- An obfuscated JavaScript file decodes URLs and injects external scripts into the document head.
Evidence against
- The manifest has no preinstall, install, or postinstall hook.
- No Node command execution is declared by the package manifest.
Behavioral surface
WebSocket
Source & flagged code
9 flagged · loading source.assets/function-4827316.wasmView file
•path = .assets/function-4827316.wasm
kind = payload_in_excluded_dir
sizeBytes = 583678
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
.assets/function-4827316.wasmView on unpkg•path = .assets/function-4827316.wasm
kind = wasm_module
sizeBytes = 583678
magicHex = [redacted]
Medium
publish.batView file
•path = publish.bat
kind = build_helper
sizeBytes = 15
magicHex = 0d0a6e706d207075626c6973680d0a
Medium
Findings
7 High3 Medium1 Low
HighPayload In Excluded Dir.assets/function-4827316.wasm
HighSemantic Analysis Limitedlogo-b2b3e4d75f89f6104a35c1c7a5972ddd1be2cf72.svg
HighAi Review Evidencepackage.json
HighAi Review Evidencelogo-b2b3e4d75f89f6104a35c1c7a5972ddd1be2cf72.svg
HighAi Review Evidenceindex-n6q3m5.js
HighAi Review Evidenceindex-z2b7r4.js
HighAi Review Evidenceindex-z2b7r4.js
MediumShips Wasm Module.assets/function-4827316.wasm
MediumShips Build Helperpublish.bat
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to webpackbootstrap5@5.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing webpackbootstrap5@5.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.