MalwarePublished 13 Nov 2026

dowload_ebok_a_concise_history_of_computers_smartphones_and_th_by_ernie_dainow_3at7j (npm) · Malicious Code

Affects dowload_ebok_a_concise_history_of_computers_smartphones_and_th_by_ernie_dainow_3at7jSource GCVE Database

Malicious package : remove dowload_ebok_a_concise_history_of_computers_smartphones_and_th_by_ernie_dainow_3at7j and rotate any secrets on hosts that installed it.

Data as of 14 Nov 2026, 00:03 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-19672

What to do

Remove dowload_ebok_a_concise_history_of_computers_smartphones_and_th_by_ernie_dainow_3at7j from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmdowload_ebok_a_concise_history_of_computers_smartphones_and_th_by_ernie_dainow_3at7j	Affected–	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package 'dowload_ebok_a_concise_history_of_computers_smartphones_and_th_by_ernie_dainow_3at7j' contains malicious code that compromises any computer on which it is installed or run. Installation of this package can lead to full system compromise, including potential unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is advised, but due to the extent of compromise, complete remediation may require additional measures such as rotating all secrets from a separate, trusted system.

Impact

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the compromised computer are at risk and should be rotated immediately from a different, secure machine. The attacker may have persistent control, and simply uninstalling the package may not fully remediate the infection.

Defensive guidance

Remove the malicious package immediately. Rotate all secrets and keys stored on the compromised computer from a separate, trusted device. Due to the potential full compromise, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components.

Summary

This threat involves a malicious npm package named 'dowload_ebok_a_concise_history_of_computers_smartphones_and_th_by_ernie_dainow_3at7j'. According to the source, any computer with this package installed or running should be considered fully compromised. The package grants potentially full control to an outside entity, risking exposure of all stored secrets and keys. Removal of the package is recommended; however, because the system may have been fully compromised, removal alone may not eliminate all malicious artifacts or backdoors.

References

github.com/advisories/GHSA-r3rg-336w-mq8g (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 14 Nov 2026, 00:03 UTC

Technical details

References

Community reviews