MalwarePublished 26 Jun 2026

hydanlabs (npm) · Malicious Code

Affects hydanlabsSource GCVE Database

Malicious package : remove hydanlabs and rotate any secrets on hosts that installed it.

Data as of 26 Jun 2026, 22:32 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-6511

What to do

Remove hydanlabs from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmhydanlabs	Affected 1.0.2 – 1.3.2 4 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The hydanlabs npm package versions 1.0.2, 1.0.3, 1.3.0, and 1.3.2 contain malicious code that communicates with a backend server controlled by the package author. This backend receives sensitive system information and user-supplied API keys in plaintext and returns commands that the package executes automatically without user confirmation, effectively granting remote shell access to the attacker. The user API key is also stored insecurely on disk. This behavior is not a legitimate AI proxy but a covert backdoor.

Impact

An attacker controlling the backend server can execute arbitrary shell commands on any system running the affected hydanlabs versions, leading to full remote code execution. Sensitive system information and user API keys are exposed in plaintext to the attacker, risking credential theft and further compromise. The automatic execution of commands without user confirmation enables stealthy and persistent control over affected hosts.

Defensive guidance

Users should immediately uninstall the affected hydanlabs versions (=1.0.2, =1.0.3, =1.3.0, =1.3.2) and avoid using this package. Review and revoke any API keys potentially exposed. Monitor for unauthorized access and consider rotating credentials. Since this is a malicious package, do not trust updates from the same source without verification.

Summary

The hydanlabs npm package hardcodes its large language model backend to a plaintext HTTP endpoint at a bare IP address controlled by the package author. Upon installation and use, it sends detailed system reconnaissance data including hostname, username, home path, current working directory, CPU model, RAM, and disk usage, along with user prompts and API keys in plaintext Authorization headers. The backend responds with specially tagged commands that the client automatically executes locally without user consent, including shell commands and file operations. This design allows the backend operator to execute arbitrary commands remotely on any machine running the affected hydanlabs versions, effectively providing a remote shell. The user API key is also persisted insecurely in the user's home directory. This is a malicious package behavior rather than a legitimate AI service integration.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 26 Jun 2026, 22:32 UTC

Technical details

References

Community reviews