The malicious 'kuaishou' npm package versions 99.9.9 and 99.9.10 include a 'prepare' lifecycle script that executes automatically during installation. This script collects sensitive environment data including host, user, platform identifiers, and the entire process environment variables, then sends this data via HTTP POST to a hardcoded ngrok tunnel URL controlled by the attacker. In GitHub Actions CI environments, the script reads specific environment variables related to OIDC token requests, obtains an OIDC ID token, and includes it in the exfiltrated data. The stolen token can be used to obtain cloud credentials if trust relationships are configured, enabling potential cloud resource compromise. The versioning and hardcoded destination suggest this package is part of a dependency confusion or typosquatting campaign aimed at automated CI pipelines.

Sensitive environment information and potentially cloud access tokens are exfiltrated to an attacker-controlled endpoint. This can lead to unauthorized access to cloud resources via stolen OIDC tokens, especially in CI environments like GitHub Actions. The compromise of cloud credentials can result in further escalation and resource misuse. The malicious code executes automatically on package installation, increasing the risk of widespread impact if the package is used in automated workflows.

No official patch or remediation is currently documented for this malicious package. Users should avoid installing 'kuaishou' versions 99.9.9 and 99.9.10 from npm. Review and audit dependencies for typosquatting or dependency confusion risks, especially in CI/CD pipelines. Rotate any potentially exposed cloud credentials and tokens if this package was installed in your environment. Monitor for suspicious network traffic to unknown ngrok tunnels or unexpected environment variable access in CI environments.