The @gbrlxvi/ts-form-utils npm package advertises trivial form-validation helpers but includes a malicious dropper payload. Upon requiring or importing the main module, it checks for environment indicators such as hostnames containing 'devbox' or 'ubuntu-fc-uvm', the presence of a .git directory, or the JULES_SESSION_ID environment variable. If matched, it reads an encrypted 11KB AES-256-CBC blob from a hidden file, decrypts it using a hardcoded key split across hex fragments, and executes the decrypted code via a dynamically constructed function. The code uses string concatenation to evade static analysis and is wrapped in a try-catch block to silently fail if errors occur. This mechanism allows attacker-controlled code execution with full privileges in sandboxed or AI-agent environments, effectively compromising the host.

Any computer that has this package installed or running is considered fully compromised. The malicious code executes with the full privileges of the host process, potentially allowing complete control over the system. All secrets and keys stored on the compromised computer should be considered exposed and must be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee eradication of all malicious artifacts or persistence mechanisms.

No official patch or fix is currently available. Immediate removal of the @gbrlxvi/ts-form-utils package from all affected systems is strongly recommended. Due to the high likelihood of full system compromise, all credentials, secrets, and keys stored on the affected machines should be rotated from a secure environment. Conduct a thorough incident response to identify and remediate any additional malicious software or persistence established by the attacker. Monitor for any signs of compromise in related environments.