Malicious code in gptlite (npm)
Affects gptliteSource GCVE Database
Rated by Threat Radar
What to do
AI-suggested
No official patch or fix is currently documented for this malicious package version. Users should avoid installing 'gptlite' version 4.0.8. It is recommended to verify package integrity and source before installation and consider using trusted package registries or alternative packages. Monitor vendor advisories for any updates or remediation guidance.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npmgptlite | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
Description
The npm package 'gptlite' version 4.0.8 contains malicious code in its preinstall lifecycle script. This script executes a Windows command that uses mshta.exe to fetch and run attacker-controlled code from an unauthenticated HTTP source (fixars.top) during installation. This results in arbitrary code execution on the installer's machine without user review.