yangmingdhl2026
This report shows the evidence for yangmingdhl2026@1.0.0, the only known version.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe package entry is a disguised browser redirector that hides its destination behind obfuscation and AES decryption, then forwards the visitor and query string. That is concrete cloaked redirect behavior even though install hooks and Node secret theft are absent.
Static reason
One or more suspicious static signals were detected.
Trigger
A browser loads index.html, the package main file.
Impact
The operator controls the redirect destination and receives the visitor query string, using a fake security interstitial to hide the handoff.
Mechanism
Obfuscated script fetches a POST endpoint, AES-decrypts the body with an embedded key, appends the page query parameters, and navigates window.location to the resulting URL.
Attack narrative
The published entry is a single HTML page styled as a Cloudflare waiting room. Its obfuscated script holds a host key and an AES key, POSTs the key to a hidden endpoint, decrypts the reply into a URL, copies the visitor query string onto that URL, and navigates the browser there. The only clear external script host is the Cloudflare Turnstile loader used as cover. No npm install hook is required; loading the page is enough to hand the visitor to an operator-chosen destination.
AI rationale
The package entry is a disguised browser redirector that hides its destination behind obfuscation and AES decryption, then forwards the visitor and query string. That is concrete cloaked redirect behavior even though install hooks and Node secret theft are absent.
Evidence
package.jsonindex.html
Network endpoints1
challenges.cloudflare.com/turnstile/v0/api.js
Decision evidence
public snapshotAI called this Malicious at 86.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json names index.html as the only published entry and defines no install lifecycle scripts.
- index.html is a fake Cloudflare interstitial that loads the Turnstile script from challenges.cloudflare.com.
- An obfuscated script embeds a host key and an AES key built from encoded fragments plus plaintext pieces.
- On page load the script POSTs JSON through fetch to an obfuscated URL, including that host key.
- It AES-decrypts the response with the embedded key and treats the plaintext as a URL.
- It copies the current page query string onto that URL and assigns window.location to it.
Evidence against
- There is no npm preinstall, install, or postinstall hook and no Node credential or filesystem harvesting.
- The Function constructor use matches typical obfuscator console anti-tamper code rather than a second remote eval sink.
Behavioral surface
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
9 flagged · loading sourceindex.htmlView file
182}
L183: (function(_0x3db4af,_0x253147){const _0xa22965={_0x224720:0x10e,_0x42066f:0x9c,_0x4d409f:0x72,_0x5aba3a:0x14b,_0x4fbf65:0xc9,_0x27418c:0xe5,_0xd76e69:0x119,_0xea649a:0x124,_0x2326f...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182•stage = html_entrypoint_analysis; reason = referenced_script_not_statically_covered; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkg7<title>Just a moment...</title>
<link rel="preconnect" href="https://challenges.cloudflare.com" />
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js"
High
Ai Review Evidence
index.html is a fake Cloudflare interstitial that loads the Turnstile script from challenges.cloudflare.com.
index.htmlView on unpkg · L7Findings
9 High1 Medium2 Low
HighObfuscated Payload Loaderindex.html
HighSemantic Analysis Limitedindex.html
HighSuspicious Lifecycle Evidencepackage.json
HighAi Review Evidenceindex.html
HighAi Review Evidenceindex.html
HighAi Review Evidenceindex.html
HighAi Review Evidenceindex.html
HighAi Review Evidenceindex.html
HighAi Review Evidenceindex.html
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to yangmingdhl2026@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing yangmingdhl2026@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.