registry / x3r0day-bunnyhijack-poc / 1.0.1

x3r0day-bunnyhijack-poc@1.0.1

BunnyHijack PoC - PATH poisoning demo against Bun trustedDependencies

AI Security Review

scanned 5h ago · by lpm-firewall-ai

The package shadows `node` in the dependency binary directory so lifecycle commands can invoke its shell shim. The shim records execution context, opens an external browser page, and then forwards execution to real Node.

Static reason

No blocking static signals were detected.

Trigger

Installing the package in an environment where a dependency lifecycle command resolves `node` from the dependency binary PATH.

Impact

Unconsented command interception, local project marker creation, execution-context collection, and browser launch during installation.

Mechanism

PATH shadowing of Node during lifecycle execution.

Attack narrative

The manifest exposes a shell script as the `node` binary. When a lifecycle script resolves that binary from the dependency PATH, the shim runs first, writes user, host, directory, and argument details to a marker file, opens an external repository page, and only then runs the genuine Node executable. This is a deliberate install-time PATH-hijacking mechanism, not ordinary package functionality.

Rationale

The package deliberately impersonates Node to intercept dependency lifecycle execution and performs unconsented local and browser side effects before forwarding the command. Its lack of its own lifecycle hook does not remove the concrete install-hook abuse.

Evidence

package.jsonshim.jsnode_modules/.bin/nodepwned-by-bunnyhijack.txt

Network endpoints1

github.com/X3r0Day/BunnyHijack-PoC

x3r0day-bunnyhijack-poc@1.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code