9remote (npm) · Malicious Code
Affects 9remoteSource GCVE Database
Malicious package : remove 9remote and rotate any secrets on hosts that installed it.
Data as of 6 Aug 2026, 18:35 UTC
Malicious package
Published to npm · OSV MAL-2026-13406
What to do
Remove 9remote from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npm9remote | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
Description
9remote is a remote-shell tool that exposes a host to the public internet via a Cloudflare Quick Tunnel. It allows incoming WebSocket input messages to be forwarded directly into a local shell, granting full interactive shell access to anyone possessing a short-lived one-time key. This behavior is by design, not a covert channel, but it results in full-host remote code execution with the user's privileges on any host running the CLI. Multiple specific versions of 9remote (npm) are affected.
References
- npmjs.com/package/9remote/v/2.1.5 (opens in a new tab)
- npmjs.com/package/9remote/v/2.1.14 (opens in a new tab)
- npmjs.com/package/9remote/v/2.1.20 (opens in a new tab)
- npmjs.com/package/9remote/v/2.1.9 (opens in a new tab)
- npmjs.com/package/9remote/v/2.1.16 (opens in a new tab)
- npmjs.com/package/9remote/v/2.1.21 (opens in a new tab)
- npmjs.com/package/9remote/v/2.1.6 (opens in a new tab)
- npmjs.com/package/9remote/v/2.2.5 (opens in a new tab)
- npmjs.com/package/9remote/v/2.2.6 (opens in a new tab)
- npmjs.com/package/9remote/v/2.1.1 (opens in a new tab)