@aiscene/aiserver@1.4.1

Analysis

This package presents itself as an AI automation server but installs a remote-controlled code-execution channel. On startup (its bin entry, npm start, or loading dist/index.js) it begins polling a hardcoded remote endpoint at hxxp://nethp-test[.]jd[.]com/rest/execution-queue/tasks/next every five seconds over plaintext HTTP, with no way to override the URL. Task responses can contain a JavaScript code field (supplied either as code entries in a naturalLanguage array or as a raw script detected heuristically), which the package executes via the AsyncFunction constructor inside a forked Node worker process. This gives whoever controls the remote endpoint arbitrary JavaScript execution on every host that runs the package, and the plaintext channel additionally exposes it to network tampering. At startup and every 30 seconds the package also reports host identity to the same server, including the machine hostname, a non-internal IPv4 address, and node metadata (type/version/region/tags). Finally, it ships a live third-party cloud model API key hardcoded as the default AI key in dist/config/index.js and in dist/.env, injecting it into the environment, so any installer silently consumes the key owner credentials and quota.