registry / z-deno-truth-va499w / 1.0.0

z-deno-truth-va499w@1.0.0

A test utility package

AI Security Review

scanned 21d ago · by lpm-firewall-ai

Importing the deceptive ./package.json export executes setup.js and drops /tmp/h2.tsx. The dropped handler reads targeted system files and returns their contents to its caller.

Static reason

No blocking static signals were detected.

Trigger

Import or require of z-deno-truth-va499w/package.json.

Impact

Disclosure of challenge/service binaries, application backdoor source, and entrypoint configuration.

Mechanism

Import-time staged secret-harvesting Deno handler dropper.

Attack narrative

The package disguises setup.js as its package.json export. Importing that subpath writes a Deno HTTP-style handler to /tmp/h2.tsx; when run, it reads targeted absolute paths, extracts binary strings, and returns the results in an HTTP response. This is a concrete staged data-disclosure payload.

Rationale

The normal entrypoint is inert, but the intentionally deceptive export activates import-time persistence of a handler designed to harvest sensitive host files. No lifecycle hook is required for the malicious path to be concrete.

Evidence

package.jsonindex.jssetup.js/tmp/h2.tsx/readflag/flagserver/app/backdoor.tsx/entrypoint.sh

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence with false-positive risk.

z-deno-truth-va499w@1.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code