Malicious code in claude-channel-discord (npm)

The 'claude-channel-discord' npm package at version 9.9.9 acts as a dependency-confusion probe. Its package.json includes preinstall and postinstall hooks that run 'node index.js --save-prod', and its main entry also executes index.js. This script collects the host's OS hostname and sends it via an HTTP GET request to a Pipedream.net URL controlled by the attacker. The package's behavior leads to automatic data exfiltration during npm install and when the package is required in code. The package's metadata and naming pattern align with known dependency confusion reconnaissance tactics, aiming to leak host identifiers to an external collection endpoint.

The primary impact is the unintended disclosure of the installer's host identifier (hostname) to an attacker-controlled external endpoint. This leakage can aid attackers in reconnaissance activities, potentially facilitating further targeted attacks. There is no indication of direct code execution beyond the data exfiltration or other malicious payloads. No known exploits in the wild have been reported.

No official patch or fix is available for this package. The best mitigation is to avoid installing or using the 'claude-channel-discord' package version 9.9.9. Review dependencies carefully to prevent dependency confusion attacks by verifying package authenticity and source. Employ strict package name whitelisting and use private registries where possible to reduce exposure to malicious packages.