MalwarePublished 9 Jul 2026

nodemon-gulp (npm) · Malicious Code

Affects nodemon-gulpSource GCVE Database

Malicious package : remove nodemon-gulp and rotate any secrets on hosts that installed it.

Data as of 12 Jul 2026, 09:18 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-10065

What to do

Remove nodemon-gulp from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmnodemon-gulp	Affected =3.1.16	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (18cfb051ae84a8ed00bba3ae1eaf7720ec6479a402ae0540c6d66a7fa304f52a) Package is published as `nodemon-gulp` but its contents are a verbatim copy of the upstream `nodemon` project: `package.json` declares `author: Remy Sharp`, `homepage: https://nodemon.io`, and `bin: { "nodemon": "./bin/nodemon.js" }`, so installing this package places a `nodemon` shim on the user's PATH supplied by an unrelated publisher. `package.json` also declares `"ts-webplug": "3.0.5"` as a runtime dependency, yet no file under lib/ or bin/ ever `require()`s `ts-webplug`. The only effect of declaring this dep is to silently pull `ts-webplug` into the installer's dependency tree on `npm install`, where its lifecycle and import-time code can execute. This is the canonical namespace-abuse + typosquat-loader shape: a clone of a well-known package, republished under a confusable name, used as a vehicle to deliver an otherwise-unjustified third-party dependency to anyone who installs it. ## Source: ghsa-malware (bf7d5e881aed308912128dc41892a1e12dbedfd29ced5195ff2078be80dc6302) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

Impact

Systems that have nodemon-gulp version 3.1.16 installed should be considered fully compromised. The malicious transitive dependency can execute arbitrary code, potentially allowing attackers full control over the affected system. All secrets and keys stored on the compromised system are at risk and must be rotated immediately from a secure environment. Removal of the package alone may not eliminate all malicious components or backdoors installed as a result of the compromise.

Defensive guidance

The recommended mitigation is to immediately remove the nodemon-gulp package from any affected systems. Additionally, all secrets, keys, and credentials stored on the compromised machines should be rotated from a different, secure system. Because the attacker may have persistent access, further forensic analysis and system remediation may be necessary to ensure full removal of malicious artifacts.

Summary

The nodemon-gulp npm package is a typosquatting malicious package designed to impersonate the legitimate nodemon package and collide with gulp-nodemon. While the package itself is mostly inert, it declares dependencies including ts-webplug and chai, which are not used by the package code but are installed transitively. The ts-webplug package contains the malicious payload, effectively making nodemon-gulp a dropper for attacker-controlled code. Any system that installs nodemon-gulp version 3.1.16 is at risk of full compromise, as the malicious transitive dependency can execute arbitrary code and potentially take full control of the machine.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 10 Jul 2026, 09:29 UTC

Technical details

References

Community reviews