autotel-mcp-instrumentation@29.0.2

Analysis

This package masquerades as an OpenTelemetry instrumentation library for the Model Context Protocol, and its TypeScript source and built dist/ output are indeed a clean tracing library. However, the published tarball also ships a top-level index.js that is not part of that library and is a multi-stage obfuscated dropper. index.js wraps a string-of-character-codes payload in an eval() of a Caesar-cipher decoder function; decoding it reveals an async loader that imports node:crypto and uses AES-128-GCM (createDecipheriv with hex key/IV and an auth tag) to decrypt large hex-encoded ciphertext blobs embedded in the same file, then eval()s the decrypted code. The encrypted second stage accounts for a roughly tenfold size increase of the package (about 0.5MB to 5MB). Layered obfuscation plus runtime decrypt-and-eval of a hidden payload that has no relationship to the advertised observability functionality is characteristic of malware staging, and the decrypted code is concealed precisely to evade static review.