The gear-composer npm package version 1.0.126 contains multiple components consistent with an install-time credential harvesting and exfiltration pipeline. A postinstall script (postinstall-agent.mjs) triggers host identification and outbound network activity. Several modules (contentScanner.js, agentStartupAudit.js) perform secret scanning by reading and base64 decoding content, then issuing fetch requests to huggingface.co endpoints. Other modules (discordRelayUpload.js) handle base64 blobs and upload collected data to Discord via ping and POST requests. An embedded relay server repeatedly sends beaconing pings. Credentials are base64-encoded and decoded at load time, with configuration and credentials hidden using encode/decode pairs. The combination of these behaviors matches an active malicious exfiltration and covert relay pattern rather than legitimate functionality.

This malicious package can harvest sensitive credentials and other secrets from the host environment during installation and exfiltrate them to external services controlled by the attacker. This compromises confidentiality and potentially enables further attacks using stolen credentials. The covert nature of the relay and encoding mechanisms increases the difficulty of detection.

No official patch or remediation is currently documented. Users should avoid using gear-composer version 1.0.126 and remove it from their environments if installed. Monitor for any suspicious network activity related to Discord or HuggingFace endpoints. Check vendor advisories or trusted sources for updates or official fixes. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.