MalwarePublished 13 Jul 2026Updated 14 Jul 2026

kuaishou (npm) · Malicious Code

Affects kuaishouSource GCVE Database

Malicious package : remove kuaishou and rotate any secrets on hosts that installed it.

Data as of 14 Jul 2026, 09:27 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-10416

What to do

Remove kuaishou from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmkuaishou	Affected =99.9.10 =99.9.9	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (fd1d5daf09cc7bfff164e60bf5abd0a1b374b5bb616f0a78cac8f6c6ea613608) The package's `prepare` lifecycle script, which runs automatically on `npm install`, collects host, user, and platform identifiers along with the full `process.env` and POSTs them to a hardcoded ngrok tunnel at crabbing-thong-overhung.ngrok-free.dev (path `/?cross_os_cloud=1`). When executed in GitHub Actions, it additionally reads ACTIONS_ID_TOKEN_REQUEST_URL and ACTIONS_ID_TOKEN_REQUEST_TOKEN, requests a GitHub Actions OIDC ID token, and includes that token in the exfiltrated payload. The version number (99.9.9) and hardcoded attacker-controlled tunnel destination are consistent with a dependency-confusion / typosquat lure targeting CI environments; the OIDC token can be exchanged for cloud credentials via configured trust relationships. ## Source: ghsa-malware (ba06f85b2f6ed01391c70e5ba328a9bacd99e5c40f62c3fb477e53bdeeb03b0e) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

Impact

Sensitive environment information and potentially cloud access tokens are exfiltrated to an attacker-controlled endpoint. This can lead to unauthorized access to cloud resources via stolen OIDC tokens, especially in CI environments like GitHub Actions. The compromise of cloud credentials can result in further escalation and resource misuse. The malicious code executes automatically on package installation, increasing the risk of widespread impact if the package is used in automated workflows.

Defensive guidance

Users should avoid installing 'kuaishou' versions 99.9.9 and 99.9.10 from npm. Review and audit dependencies for typosquatting or dependency confusion risks, especially in CI/CD pipelines. Rotate any potentially exposed cloud credentials and tokens if this package was installed in your environment. Monitor for suspicious network traffic to unknown ngrok tunnels or unexpected environment variable access in CI environments.

Summary

The malicious 'kuaishou' npm package versions 99.9.9 and 99.9.10 include a 'prepare' lifecycle script that executes automatically during installation. This script collects sensitive environment data including host, user, platform identifiers, and the entire process environment variables, then sends this data via HTTP POST to a hardcoded ngrok tunnel URL controlled by the attacker. In GitHub Actions CI environments, the script reads specific environment variables related to OIDC token requests, obtains an OIDC ID token, and includes it in the exfiltrated data. The stolen token can be used to obtain cloud credentials if trust relationships are configured, enabling potential cloud resource compromise. The versioning and hardcoded destination suggest this package is part of a dependency confusion or typosquatting campaign aimed at automated CI pipelines.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 13 Jul 2026, 09:22 UTC

Technical details

References

Community reviews