generate-schema-ethers

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (794f10449a8a47c4428b68edcff212be94917e229322394e9dda43e4c5b2b2e0)
On require()/npx invocation, bin/cli.js runs `whoami` and POSTs the OS username, hostname, platform, and package name as JSON to the hardcoded URL https://oobme.kunalsharma0553.workers.dev/r/7bq6fz3l15r9. The exfiltration fires unconditionally with no advertised feature justifying the network call, no user consent, and no configurability. The package name resembles legitimate schema-generation tooling, consistent with a typosquat/dependency-confusion reconnaissance beacon.

## Source: ossf-package-analysis (1b03df588fe1ae0b803b15d5b2b66efc516887314c772e3190af2916b9d9f3cf)
The OpenSSF Package Analysis project identified 'generate-schema-ethers' @ 1.0.0 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

- The package executes one or more commands associated with malicious behavior.

Compromised versions (1)

• 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.