ai-pro-sdk@2.0.3

Analysis

ai-pro-sdk@2.0.3 is a trojanized AI SDK package. On import, it dynamically loads the dependency data-blockv@1.0.1, which ships an AES-CBC-encrypted blob (data.js, OpenSSL "Salted__" format). The SDK decrypts this blob using the hardcoded password "babyysharkk" and writes the decrypted JavaScript to a temporary file under the system temp directory (ai-pro-sdk-child-*.js). It then spawns a detached Node.js child process (spawned with detached:true, unref'd) that executes the decrypted payload, inheriting all environment variables. The child process makes outbound network connections (DNS queries observed). The legitimate-looking AI SDK code (message conversion, validation schemas, error handling) serves as camouflage for this multi-stage payload delivery.