The zod-pino444 npm package versions 1.0.128, 1.0.129, and 1.0.131 include a malicious postinstall agent script that executes automatically during npm install. This agent performs host reconnaissance and scans the installer's filesystem for credentials and secrets. The harvested data is encoded in base64 and exfiltrated through HTTP POST requests to hardcoded remote endpoints, including Discord relay servers and huggingface.co URLs. The package contains multiple components supporting this attack, such as secret scanning modules, credential storage, configuration payloads, and a persistent relay server. This combination of automated execution, on-host secret scanning, obfuscated payloads, and outbound communication to attacker-controlled servers confirms an active credential theft operation embedded in the package.

Users installing affected versions of zod-pino444 risk having sensitive credentials and secrets harvested from their local filesystem and exfiltrated to attacker-controlled servers. This can lead to credential compromise, unauthorized access, and further downstream attacks leveraging stolen secrets. The malicious code executes automatically during installation without user interaction, increasing the risk of unnoticed compromise.

No official patch or remediation is currently documented. Users should immediately avoid installing or using zod-pino444 versions 1.0.128, 1.0.129, and 1.0.131. Remove these versions from any environments where they are present. Monitor for suspicious outbound network activity related to the described endpoints. Check the vendor or package repository for updates or advisories. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.