MalwarePublished 7 Aug 2026

delivery-ci-cli (npm) · Malicious Code

Affects delivery-ci-cliSource GCVE Database

Malicious package : remove delivery-ci-cli and rotate any secrets on hosts that installed it.

Data as of 7 Aug 2026, 15:36 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-13538

What to do

Remove delivery-ci-cli from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmdelivery-ci-cli	Affected =35.3.5	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The delivery-ci-cli npm package version 35.3.5 contains malicious code that downloads and executes platform-specific native binaries from obfuscated Cloudflare Workers hosts without verification. If HTTPS delivery fails, it uses a DNS-TXT record covert channel to retrieve and execute payloads. The package masquerades as a benign CI CLI SDK with no dependencies to conceal its dropper behavior.

Impact

This malicious package can execute arbitrary native code on the host system without user consent or verification, potentially leading to full system compromise or unauthorized actions. The lack of signature or hash verification and use of covert DNS channels increases stealth and persistence risks. No known exploits in the wild are reported yet.

Defensive guidance

Users should avoid installing or using delivery-ci-cli version 35.3.5. Verify package integrity and source before installation, and consider removing this package if present. Monitor for updates from the package maintainer or npm registry for remediation announcements. Since this is not a cloud service, remediation depends on user action.

Summary

The delivery-ci-cli package (version 35.3.5) includes a malicious _bootstrap.js script that downloads a native binary from obfuscated Cloudflare Workers domains, writes it to temporary directories under misleading filenames, sets executable permissions, and executes it detached from the parent process. If HTTPS-based download fails, it falls back to retrieving the payload via DNS-TXT record queries from several domains, concatenates and base64-decodes the response, writes it to disk, and executes it. Hostnames and API names are dynamically assembled at runtime to evade static detection. The package README falsely presents the tool as a benign continuous integration CLI SDK with no dependencies, serving as a cover for its malicious dropper functionality.

References

npmjs.com/package/delivery-ci-cli/v/35.3.5 (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 7 Aug 2026, 15:36 UTC

Technical details

References

Community reviews