MalwarePublished 30 Jun 2026Updated 10 Jul 2026

@businessapp-microsites/apis (npm) · Malicious Code

Affects @businessapp-microsites/apisSource GCVE Database

Malicious package : remove @businessapp-microsites/apis and rotate any secrets on hosts that installed it.

Data as of 11 Jul 2026, 09:43 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-6696

What to do

Remove @businessapp-microsites/apis from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npm@businessapp-microsites/apis	Affected =9999.0.0 =9999.0.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (b70ab5da6865ec94b15097fa84836ab41f39b65a5277974b407c545d8d424c7f) @businessapp-microsites/apis@9999.0.2 is a dependency-confusion squat against the private scope `@businessapp-microsites`, published with an implausibly high version (9999.0.2) to outrank any internal registry copy. On `npm install`, its postinstall.js runs child_process.execSync to collect `hostname`, `whoami`, and `uname -a` / `ver`, combines this with os.hostname(), os.userInfo(), and CI attribution env vars (GITHUB_REPOSITORY, GITHUB_SHA, RUNNER_NAME, etc.), and sends them via https.get to a hardcoded external callback at poc-trustpilot-npm-1782770591.testingboxes.com. Any org whose internal registry mirrors public npm and resolves this scope will auto-execute the beacon under CI credentials. The package self-labels as a bug-bounty PoC, but the executed code is a full dependency-confusion exfil payload against installers of the squatted scope; cover-story framing does not change the installer-side harm. ## Source: ghsa-malware (99d9bf41216d926667db3fad15424bf774c930eea925034003811ff05ca4bbca) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

Impact

Systems that install this package are subject to full compromise as the package executes code that collects sensitive system and CI environment information and exfiltrates it to an external attacker-controlled server. This can lead to exposure of secrets, credentials, and internal environment details. The compromise may persist beyond removal of the package, requiring full secret and key rotation and potentially system reimaging.

Defensive guidance

The package should be immediately removed from any affected systems. All secrets and keys stored on compromised systems should be rotated from a separate, trusted environment. Organizations should audit their internal package registries and dependency resolution configurations to prevent dependency confusion attacks by ensuring private scopes are not resolved to public npm packages with higher version numbers. Monitor for and block network traffic to the known exfiltration domain. Due to the potential full compromise, consider full system reimaging if this package was installed.

Summary

This threat involves a malicious npm package published under the private scope @businessapp-microsites with versions 9999.0.0 and 9999.0.1. It exploits dependency confusion by using a very high version number to supersede legitimate internal packages. Upon installation, its postinstall.js script executes commands to gather hostname, user identity, OS details, and CI environment variables, then sends this information to a hardcoded external callback URL. This results in exfiltration of sensitive environment data and potentially full compromise of the host system. The package is described as a bug-bounty proof-of-concept but functions as a fully malicious payload. Systems installing this package should be considered compromised.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 10 Jul 2026, 11:45 UTC

Technical details

References

Community reviews