The @ikbal_fadilah_vanexa01/vanexa-agent npm package ships an agent daemon that executes commands received from a remote phone app on the host machine using child_process/spawn, including PowerShell and inline JavaScript/Python evaluation. Contrary to the README's claim of LAN-only WebSocket communication with no middleman, the compiled bundle hardcodes two Cloudflare Workers endpoints hosted on a personal Cloudflare account unrelated to the npm publisher. Commands and user-supplied data transit this third-party relay before execution, enabling the relay operator to remotely execute arbitrary commands on the installer's host. The main runtime is delivered as V8 bytecode compiled from source at postinstall, reducing the ability to audit the malicious network-driven execution path. This combination of factors makes normal use of this package equivalent to granting remote code execution privileges to an unknown third party.

Users installing and running this package effectively grant remote command execution access to a third-party operator controlling the hardcoded Cloudflare Workers endpoints. This allows arbitrary code execution on the host system, potentially leading to full system compromise, data theft, or further malicious activity. The use of bytecode to obscure the malicious payload further complicates detection and analysis.

No official patch or remediation is currently documented. Users should immediately discontinue use of the @ikbal_fadilah_vanexa01/vanexa-agent package and remove it from their systems. Avoid installing packages from untrusted or unknown publishers, especially those that execute remote commands or use obfuscation techniques such as bytecode. Monitor for any unusual activity on systems where this package was installed and consider rebuilding affected environments if compromise is suspected. Patch status is not yet confirmed — check the vendor advisory or npm security advisories for updates.