MalwarePublished 26 Apr 2026Updated 3 Sep 2026

frank-research-poc-apple (npm) · Malicious Code

Affects frank-research-poc-appleSource GCVE Database

What to do

Affected software

Product	Affected	Fixed in
npmfrank-research-poc-apple	Affected =1.1.4	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package frank-research-poc-apple version 1.1.4 contains malicious code that executes commands associated with malicious behavior. Any system with this package installed or running should be considered fully compromised. Removal of the package alone may not eliminate all malicious software, and all secrets and keys on the affected system should be rotated from a separate, trusted computer.

Impact

Systems with frank-research-poc-apple version 1.1.4 installed or running are considered fully compromised. Attackers may have gained full control, risking exposure or theft of secrets and keys stored on the system. Simply removing the package does not guarantee removal of all malicious components introduced by it.

Defensive guidance

Immediately remove the frank-research-poc-apple package version 1.1.4 from affected systems. Rotate all secrets and keys stored on the compromised computer from a separate, trusted device. Because full control may have been given to an attacker, consider rebuilding or thoroughly cleaning the affected system to ensure complete remediation.

Summary

The npm package frank-research-poc-apple at version 1.1.4 has been identified as malicious by multiple sources including Amazon Inspector, GHSA malware advisories, and the OpenSSF Package Analysis project. The package executes commands linked to malicious activities, leading to full system compromise upon installation or execution. This malicious behavior compromises the confidentiality and integrity of the affected system and its stored secrets.

References

github.com/advisories/GHSA-78hq-gp8w-grwp (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 7 Sep 2026, 20:09 UTC

Technical details

References

Community reviews