The @leejungkiin/awkit npm package includes a lifecycle install script (scripts/dependency-manager.js) that executes a curl command to fetch and run a shell script from the rtk-ai/rtk GitHub repository's master branch, which is not pinned to a specific commit. This introduces a remote code execution vulnerability because the fetched script is controlled by a third party unrelated to the package scope. The script collects platform and home directory information and has full shell privileges, enabling environment modification, further binary installation, or data exfiltration. Additional bundled code uses child_process and hardcoded HTTP endpoints, indicating further potentially malicious behavior. Multiple exact versions of the package are affected.

This vulnerability allows an attacker controlling the third-party GitHub repository to execute arbitrary code on the machine installing the package with full shell privileges. This can lead to environment compromise, installation of additional malicious binaries, and exfiltration of sensitive host data. Because the malicious script is fetched dynamically from an unpinned branch, the attack surface is persistent and can be updated by the attacker at any time.

No official patch or remediation is currently documented. Users should avoid installing or updating to the affected versions of @leejungkiin/awkit. Audit and block network access to the malicious third-party domains (raw.githubusercontent.com/rtk-ai/rtk and www.rtk-ai.app) during installation. Consider using package integrity verification or locking dependencies to trusted versions. Monitor for updates from the package maintainer or npm advisories for any official fixes.