registry / wsallin / 1.0.1

wsallin@1.0.1

Peace in the world | International movement for peace

AI Security Review

scanned 4d ago · by lpm-firewall-ai

Running the package launches a remotely tasked management agent when its server and key are configured. That server can obtain interactive shell access and read or write caller-selected filesystem paths.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

User runs the wsallin CLI or start script with YOUNGHERO_SERVER and YOUNGHERO_KEY configured.

Impact

Remote operator can execute shell commands and exfiltrate or overwrite files.

Mechanism

gRPC remote shell and file-transfer agent

Rationale

The source implements a configuration-gated remote management agent with shell execution and unrestricted file transfer. This is a dangerous dual-use capability rather than an unconsented install-time attack.

Evidence

index.jspackage.jsonindex.html/proc/net/tcp/proc/net/tcp6/proc/net/udp/proc/net/udp6

Network endpoints3

api.ip.sb/geoipip-api.com/jsonoooo.serv00.net/add-url

Decision evidence

public snapshot

AI called this Suspicious at 96.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

Configured gRPC task stream dispatches remote terminal and file-manager tasks.
Terminal task starts an interactive shell and forwards its I/O to the remote stream.
File-manager task reads requested files and accepts uploads to supplied paths.
The agent starts whenever the package server is run.

Evidence against

No npm preinstall, install, or postinstall hook is declared.
Remote-control agent requires YOUNGHERO_SERVER and YOUNGHERO_KEY environment configuration.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 1 file(s), 38.9 KB of source, external domains: api-ipv4.ip.sb, api.ip.sb, blog.cloudflare.com, developers.cloudflare.com, dns.google, ip-api.com, ipv4.ip.sb, ipv6.ip.sb, oooo.serv00.net

Source & flagged code

8 flagged

index.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

3const os = require('os');

4const http = require('http');

5const fs = require('fs');

6const net = require('net');

7const dns = require('dns');

8const path = require('path');

9const https = require('https');

10const crypto = require('crypto');

11const { Buffer } = require('buffer');

12const axios = require('axios');

13const si = require('systeminformation');

14const grpc = require('@grpc/grpc-js');

15const { spawn } = require('child_process');

16const protoLoader = require('@grpc/proto-loader');

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L14

17const { WebSocket, createWebSocketStream } = require('ws');

19// ========================== 环境变量配置 ==========================

20const KAMAN = process.env.KAMAN || '216db1eb-7f20-40f3-b4c4-8aa422cf0c6d';

21const YOUNGHERO_SERVER = process.env.YOUNGHERO_SERVER || '';

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L5

Critical

Download Execute

Source downloads or fetches remote code and executes it.

index.jsView on unpkg · L3

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg · L3

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

index.jsView on unpkg · L3

22const YOUNGHERO_KEY = process.env.YOUNGHERO_KEY || '';

23const YUMING = process.env.YUMING || 'your-domain';

24const AUTO_ACCESS = process.env.AUTO_ACCESS || false;

25const SUB_PATH = process.env.SUB_PATH || 'sub';

26const NAME = process.env.NAME || '';

27const PORT = process.env.PORT || 3000;

29// YH-Agent 配置

30const AGENT_VERSION = 'faiz-5.5.5';

31const REPORT_DELAY = 4;

32const RETRY_DELAY = 10000;

33const IP_REPORT_PERIOD = 1800;

34const NETWORK_TIMEOUT = 5000;

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

index.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = wsallin@1.0.0 matchedPath = index.js matchedIdentity = npm:d3NhbGxpbg:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = e2415ef7b351bd7c signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = wsallin@1.0.0 matchedPath = index.js matchedIdentity = npm:d3NhbGxpbg:1.0.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

Source & flagged code

8 flagged · loading source

index.jsView file

5const fs = require('fs'); L6: const net = require('net'); L7: const dns = require('dns'); ... L14: const grpc = require('@grpc/grpc-js'); L15: const { spawn } = require('child_process'); L16: const protoLoader = require('@grpc/proto-loader'); ... L19: // ========================== 环境变量配置 ========================== L20: const KAMAN = process.env.KAMAN || '216db1eb-7f20-40f3-b4c4-8aa422cf0c6d'; L21: const YOUNGHERO_SERVER = process.env.YOUNGHERO_SERVER || '';

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L5

3const os = require('os'); L4: const http = require('http'); L5: const fs = require('fs'); L6: const net = require('net'); L7: const dns = require('dns'); L8: const path = require('path'); ... L14: const grpc = require('@grpc/grpc-js'); L15: const { spawn } = require('child_process'); L16: const protoLoader = require('@grpc/proto-loader'); ... L19: // ========================== 环境变量配置 ========================== L20: const KAMAN = process.env.KAMAN || '216db1eb-7f20-40f3-b4c4-8aa422cf0c6d'; L21: const YOUNGHERO_SERVER = process.env.YOUNGHERO_SERVER || '';

Critical

Download Execute

Source downloads or fetches remote code and executes it.

index.jsView on unpkg · L3

3Trigger-reachable chain: scripts.start -> index.js L3: const os = require('os'); L4: const http = require('http'); L5: const fs = require('fs'); L6: const net = require('net'); L7: const dns = require('dns'); L8: const path = require('path'); ... L14: const grpc = require('@grpc/grpc-js'); L15: const { spawn } = require('child_process'); L16: const protoLoader = require('@grpc/proto-loader'); ... L19: // ========================== 环境变量配置 ========================== L20: const KAMAN = process.env.KAMAN || '216db1eb-7f20-40f3-b4c4-8aa422cf0c6d'; L21: const YOUNGHERO_SERVER = process.env.YOUNGHERO_SERVER || '';

Findings

3 Critical5 High3 Medium5 Low

CriticalSame File Env Network Executionindex.js

CriticalDownload Executeindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighChild Processindex.js

HighCommand Output Exfiltrationindex.js

HighSemantic Analysis Limitedindex.js

HighKnown Malware Source Similarityindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings