Malicious code in openai-pr-reviewer (npm)

The openai-pr-reviewer npm package version 1.0.0 includes a preinstall lifecycle script that runs automatically on npm install. This script executes index.js, which gathers extensive system and user environment data, including sensitive files such as /etc/passwd and /etc/hosts, and sends this information over HTTPS to a hardcoded Burp Collaborator subdomain. This behavior constitutes malicious code embedded in the package, enabling remote attackers to gain sensitive information and potentially full control of the affected system. The compromise is silent and requires no user interaction, making detection difficult. The package should be removed, but due to the severity of the compromise, full remediation may require system rebuild and credential rotation.

Any system that installs openai-pr-reviewer version 1.0.0 is at high risk of full compromise. The malicious preinstall script exfiltrates sensitive system and user information to an attacker-controlled server. This can lead to unauthorized access, credential theft, and persistent control over the affected machine. Because the compromise occurs automatically during installation, users may be unaware of the breach. The presence of this package on a system implies that all stored secrets and keys should be considered compromised and rotated immediately from a separate, secure environment.

There is no official patch or fix available for this malicious package. Immediate removal of openai-pr-reviewer version 1.0.0 from all affected systems is required. Due to the high likelihood of full system compromise, all secrets, credentials, and keys stored on the affected machines must be rotated from a different, trusted system. Consider rebuilding or thoroughly cleaning the affected systems to ensure removal of any persistent malicious artifacts. Avoid installing this package or any untrusted npm packages without thorough vetting.