hyperion-react-native-testapp (npm) · Malicious Code
Affects hyperion-react-native-testappSource GCVE Database
Rated by Threat Radar
Data as of 10 Sep 2026, 18:48 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npmhyperion-react-native-testapp | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid installing the hyperion-react-native-testapp package, especially versions 1.0.0 and >=10.0.0, until the package is verified clean or removed from repositories. Review and audit npm packages before installation to detect suspicious lifecycle scripts. Consider using package integrity verification tools and restricting installation of untrusted packages.
Description
The hyperion-react-native-testapp npm package contains malicious code that executes a preinstall script during npm install. This script sends the installer's username, current directory, and hostname to a third-party webhook URL without user consent. This behavior constitutes unauthorized data exfiltration and is consistent with dependency confusion proof-of-concept techniques, though the exfiltration itself is real regardless of intent.