The ledgerflow-deploy-utils npm package (version 1.0.1) includes a postinstall script that accesses the AWS instance metadata service at 169.254.169.254 to obtain IAM role credentials. It then transmits these credentials and a reachability probe to a hardcoded IP address (54.226.194.239) over plain HTTP. The package exports only placeholder functions with no real functionality, indicating the main intent is to perform install-time reconnaissance on AWS-hosted environments. This technique is consistent with dependency confusion or internal name squatting attacks aimed at stealing cloud credentials from corporate build systems and CI runners.

If installed in an AWS-hosted environment, this package can leak IAM role credentials to an attacker-controlled server. This exposure enables potential follow-on credential abuse, including unauthorized access to cloud resources. The malicious behavior occurs silently during installation, making detection difficult. No direct exploit in the wild is currently known, but the impact of credential theft is high.

No official patch or remediation is currently documented. Users should avoid installing ledgerflow-deploy-utils version 1.0.1. Review and restrict usage of internal or private npm packages to prevent dependency confusion attacks. Monitor for unexpected network connections to suspicious IP addresses during package installation. Check vendor advisories or npm security advisories for updates or removal of the malicious package. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.