MalwarePublished 12 Jul 2026Updated 14 Jul 2026

babel-preset-lib-client (npm) · Malicious Code

Affects babel-preset-lib-clientSource GCVE Database

Malicious package : remove babel-preset-lib-client and rotate any secrets on hosts that installed it.

Data as of 14 Jul 2026, 09:27 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-10214

What to do

Remove babel-preset-lib-client from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmbabel-preset-lib-client	Affected =4.9.10 =4.9.9 =4.9.11	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (4274de0136aa69f8b0f4eba03412c7809a1b8c2446bb3ed7f6de1333475aa4c4) index.js, the package main, runs a load-time IIFE that collects OS platform and architecture, hostname, username, private and public IP (via https://api.ipify.org), current working directory, the full output of `printenv` (base64-encoded), and the base64-encoded output of `tree../`, then POSTs the aggregated payload to a hardcoded Discord webhook at https://discord.com/api/webhooks/1524917003394089029/. The package name mimics the babel-preset naming convention but the code implements no Babel functionality; author, description, and keywords are empty. Any consumer that installs and requires this package leaks its full process environment (typically including NPM_TOKEN, AWS_*, GITHUB_TOKEN, and other CI/developer secrets) plus a listing of the parent directory to the attacker-controlled Discord channel. ## Source: ghsa-malware (fea0fc558d775f5f0b5312b5d3f5ead65a9b5963916fc1c4193b84fc66f3f7d9) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

Impact

Sensitive environment variables and system information are leaked to an attacker-controlled endpoint, potentially exposing credentials such as NPM_TOKEN, AWS keys, GitHub tokens, and other secrets used in continuous integration or development environments. This can lead to unauthorized access, privilege escalation, and compromise of related infrastructure or services.

Defensive guidance

Users should immediately remove and avoid installing or requiring the babel-preset-lib-client package versions 4.9.9, 4.9.10, and 4.9.11. Review and revoke any potentially exposed secrets and rotate credentials that may have been compromised. Monitor for any unauthorized access resulting from leaked credentials. Check vendor advisories or trusted sources for updates or official fixes.

Summary

The malicious npm package babel-preset-lib-client (versions 4.9.9, 4.9.10, and 4.9.11) executes a load-time Immediately Invoked Function Expression (IIFE) that gathers extensive system and environment information, including sensitive environment variables and directory listings. This aggregated data is exfiltrated via an HTTP POST request to a hardcoded Discord webhook URL. The package falsely presents itself as a Babel preset but contains no Babel-related functionality, indicating its sole purpose is data theft. This behavior exposes any consuming environment to significant information disclosure risks.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 13 Jul 2026, 09:57 UTC

Technical details

References

Community reviews