Malicious code in llm-traces-app (npm)

The llm-traces-app npm package version 1.0.1 includes a malicious preinstall lifecycle hook that executes 'node index.js' on installation. This script gathers host identity details including hostname, user info, home directory, DNS servers, and current working directory. It also reads the installer's /etc/passwd and /etc/hosts files to enumerate local user accounts and system configuration. The collected data is sent via HTTPS POST to a Burp Collaborator (OAST) subdomain controlled by the package publisher, enabling arbitrary out-of-band data exfiltration. This behavior occurs automatically on default installation without user interaction, representing a textbook supply-chain exfiltration attack. The package compromises the host system, potentially granting the attacker full control.

Systems with llm-traces-app version 1.0.1 installed are fully compromised due to the malicious code executing on installation and exfiltrating sensitive system and user information. This includes enumeration of local user accounts and system configuration files. The attacker gains out-of-band access to this data and potentially full control over the compromised system. All secrets and keys stored on the affected system should be considered exposed and rotated immediately. Removal of the package alone may not remove all malicious artifacts or backdoors introduced.

No official patch or fix is indicated. Immediate removal of the llm-traces-app package version 1.0.1 is recommended. Due to the high likelihood of full system compromise, all secrets and credentials stored on the affected system should be rotated from a separate, trusted device. Comprehensive incident response and forensic analysis should be conducted to identify and remediate any persistent threats. Monitor for any unusual outbound network traffic related to the exfiltration domain. Consider blocking the known exfiltration domain at network perimeter controls.