MalwarePublished 5 Aug 2026

aws-sdk-v4 (npm) · Malicious Code

Affects aws-sdk-v4Source GCVE Database

Malicious package : remove aws-sdk-v4 and rotate any secrets on hosts that installed it.

Data as of 5 Aug 2026, 22:03 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-13218

What to do

Remove aws-sdk-v4 from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmaws-sdk-v4	Affected =3.650.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package aws-sdk-v4 impersonates the legitimate @aws-sdk/client-s3 package and contains malicious code that exfiltrates environment information and system details to an attacker-controlled Telegram bot. On first import, it collects sensitive environment variables including potential secrets and sends them encoded to a hardcoded Telegram chat. The package also exposes unrelated wallet functions, indicating deceptive intent. This affects version 3.650.0 of aws-sdk-v4.

Impact

Sensitive environment information and secrets present during the package import are transmitted to an attacker-controlled Telegram channel, potentially compromising credentials and other confidential data. This can lead to unauthorized access or further compromise of systems relying on these secrets.

Defensive guidance

Users should avoid using the aws-sdk-v4 package version 3.650.0 from untrusted sources. Remove the package if installed and verify that no sensitive credentials were compromised. Use only official AWS SDK packages from trusted repositories. Monitor for any unauthorized access that could result from leaked secrets.

Summary

The aws-sdk-v4 npm package is a malicious package impersonating the legitimate AWS SDK client for S3. When its index.js is required, it serializes process environment variables along with hostname, username, home directory, platform, and current working directory into a JSON string, base64-encodes this data, and sends it via a Telegram Bot API sendMessage request to a hardcoded bot token and chat ID. A temporary flag file prevents repeated transmissions. This exfiltration can leak sensitive secrets such as CI tokens, cloud credentials, and API keys present in the environment. Additionally, the package exposes wallet-related functions inconsistent with its advertised purpose, reinforcing its deceptive nature. The known affected version is 3.650.0.

References

npmjs.com/package/aws-sdk-v4/v/3.650.0 (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 5 Aug 2026, 22:03 UTC

Technical details

References

Community reviews