The ai-node-relay npm package's main entry point is an obfuscated JavaScript file that, when required, launches a Fastify server bound to 0.0.0.0:4001 and initiates a heartbeat loop. It collects host fingerprint information (CPU, memory, platform, uptime) and posts it to a gateway URL configurable via environment variables. The gateway's JSON response can overwrite critical encryption environment variables in the running process, effectively allowing remote control over cryptographic material. There is no evidence of credential scraping or remote code fetching, and no hardcoded attacker endpoints. Despite this, the package's behavior of binding a public server on require and allowing runtime environment mutation constitutes a severe trust and security risk. The package is flagged as malicious and any system with it installed should be considered fully compromised.

Any system with the ai-node-relay package installed or running is considered fully compromised. The package exposes a public server interface immediately upon being required, potentially allowing unauthorized access. It collects and transmits detailed host fingerprint data to a remote gateway and permits that gateway to overwrite encryption keys and secrets in the environment, which could lead to further compromise or unauthorized cryptographic operations. Secrets and keys stored on the compromised system should be rotated immediately from a separate, trusted system. Removal of the package alone does not guarantee elimination of all malicious components or backdoors.

There is no official patch or fix available for this malicious package. The recommended mitigation is to immediately remove the ai-node-relay package from all affected systems. Treat any system with this package installed or running as fully compromised. Rotate all secrets and cryptographic keys from a different, trusted environment. Conduct a thorough security assessment and remediation of the affected systems. Exercise caution and perform human review before trusting or installing this package or similar packages from untrusted sources.