The golaaa npm package (version 1.0.0) includes malicious functionality that launches a local browser instance with remote debugging on port 9222 and disables Content Security Policy protections. It injects a persistent script via the Chrome DevTools Protocol that intercepts network fetch requests, logs user keystrokes, and captures the contents of the document body and active elements. This captured data is base64-encoded and sent via POST requests to a hardcoded Cloudflare Worker endpoint (https://ai-script.test0ing7.workers.dev/), which is not the package's documented inference provider. The package also obfuscates two API keys using XOR and base64 encoding, reconstructing them at runtime, indicating an attempt to conceal the data exfiltration mechanism and credentials from static analysis. There is no configuration option to change the data exfiltration endpoint, confirming the malicious intent.

Users of golaaa version 1.0.0 are at risk of sensitive data leakage, including keystrokes and page content, to an attacker-controlled server. This compromises confidentiality and privacy, potentially exposing sensitive information entered or displayed in the browser instance launched by the package. The obfuscation of credentials and hardcoded exfiltration endpoint suggests deliberate concealment of malicious activity.

No official patch or remediation is currently documented for this malicious package version. Users should immediately discontinue use of golaaa version 1.0.0 and remove it from their environments. Avoid installing or running this package. Monitor for any unauthorized data exfiltration activity related to the described endpoint. Since this is a malicious package, the best mitigation is to avoid using it entirely.