Malicious code in @openzeppelin-5/contracts (npm)
@openzeppelin-5/contracts is a malicious npm package published by npm account `mssjeep843` that impersonates OpenZeppelin's `@openzeppelin/contracts` (the v5 line) via the look-alike scope `@openzeppelin-5`, falsely describing itself as a "compatibility distribution". It ships no Solidity contracts — only an install-time payload (index.js) run via preinstall/postinstall that harvests credential-shaped environment variables and reads and exfiltrates SSH private keys, cloud credentials (AWS/GCP/Kubernetes/Docker), Solana/Anchor/NEAR/Sui wallet keys, Foundry keystores, `.git-credentials` and local `.env` files to `https://webhook.site/326b0891-2093-4800-a4c1-686ce3e07b09`. It is one of a series of DeFi/crypto impersonation packages from the same account sharing this webhook.site endpoint, which also squat Aerodrome Finance, Camelot AMM, Euler EVC, BoringVault and Uniswap Permit2. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (800da818da3fee0353766227eafcd43c0c7cf7fd0126af5ded48b7c1ba522e21) Package name typosquats @openzeppelin/contracts. package.json declares both preinstall and postinstall as `node index.js || true`, so the payload auto-executes on `npm install`. index.js harvests process.env entries matching KEY|TOKEN|SECRET|MNEMONIC|WALLET|AWS|GITHUB|NPM and reads installer-side credential files including ~/.aws/credentials, ~/.ssh/id_rsa, ~/.ssh/id_ed25519, ~/.kube/config, ~/.docker/config.json, ~/.netrc, ~/.npmrc, ~/.git-credentials, gcloud/solana/sui/foundry keystores, and local.env files. The bundle is POSTed to a hardcoded webhook.site endpoint (path 326b0891-2093-4800-a4c1-686ce3e07b09) via a detached child process spawned with a randomized 60–240 second delay to outlive install-time scanning windows. A hostname regex (/^(scan-|detonation|sandbox|ubuntu-fc-uvm)/i) throws early on known sandbox/scanner hosts as anti-analysis gating.
AI Analysis
Technical Summary
The malicious @openzeppelin-5/contracts package (versions 1.0.0 and 1.0.1) contains a package.json that declares preinstall and postinstall scripts executing 'node index.js || true'. The index.js script collects environment variables matching sensitive keywords (e.g., KEY, TOKEN, SECRET, MNEMONIC, WALLET, AWS, GITHUB, NPM) and reads various credential files such as ~/.aws/credentials, ~/.ssh/id_rsa, ~/.kube/config, ~/.docker/config.json, ~/.npmrc, ~/.git-credentials, and others. The harvested data is sent to a hardcoded webhook.site endpoint via a detached child process with a randomized delay to evade detection. The malware also performs hostname regex checks to avoid running on known sandbox or scanner hosts, indicating anti-analysis capabilities.
Potential Impact
Sensitive environment variables and credential files on the installer’s system can be exfiltrated to an attacker-controlled endpoint, potentially leading to credential compromise and unauthorized access to cloud services, source code repositories, and other sensitive resources. This compromises the security of the affected system and any connected infrastructure relying on these credentials.
Mitigation Recommendations
No official patch or remediation guidance is available. Users should avoid installing versions 1.0.0 and 1.0.1 of the @openzeppelin-5/contracts package. Verify package authenticity before installation and consider using trusted package sources or integrity verification mechanisms. Monitor for suspicious network activity related to webhook.site endpoints. Remove the malicious package if already installed and rotate any potentially exposed credentials.
Malicious code in @openzeppelin-5/contracts (npm)
Description
@openzeppelin-5/contracts is a malicious npm package published by npm account `mssjeep843` that impersonates OpenZeppelin's `@openzeppelin/contracts` (the v5 line) via the look-alike scope `@openzeppelin-5`, falsely describing itself as a "compatibility distribution". It ships no Solidity contracts — only an install-time payload (index.js) run via preinstall/postinstall that harvests credential-shaped environment variables and reads and exfiltrates SSH private keys, cloud credentials (AWS/GCP/Kubernetes/Docker), Solana/Anchor/NEAR/Sui wallet keys, Foundry keystores, `.git-credentials` and local `.env` files to `https://webhook.site/326b0891-2093-4800-a4c1-686ce3e07b09`. It is one of a series of DeFi/crypto impersonation packages from the same account sharing this webhook.site endpoint, which also squat Aerodrome Finance, Camelot AMM, Euler EVC, BoringVault and Uniswap Permit2. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (800da818da3fee0353766227eafcd43c0c7cf7fd0126af5ded48b7c1ba522e21) Package name typosquats @openzeppelin/contracts. package.json declares both preinstall and postinstall as `node index.js || true`, so the payload auto-executes on `npm install`. index.js harvests process.env entries matching KEY|TOKEN|SECRET|MNEMONIC|WALLET|AWS|GITHUB|NPM and reads installer-side credential files including ~/.aws/credentials, ~/.ssh/id_rsa, ~/.ssh/id_ed25519, ~/.kube/config, ~/.docker/config.json, ~/.netrc, ~/.npmrc, ~/.git-credentials, gcloud/solana/sui/foundry keystores, and local.env files. The bundle is POSTed to a hardcoded webhook.site endpoint (path 326b0891-2093-4800-a4c1-686ce3e07b09) via a detached child process spawned with a randomized 60–240 second delay to outlive install-time scanning windows. A hostname regex (/^(scan-|detonation|sandbox|ubuntu-fc-uvm)/i) throws early on known sandbox/scanner hosts as anti-analysis gating.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The malicious @openzeppelin-5/contracts package (versions 1.0.0 and 1.0.1) contains a package.json that declares preinstall and postinstall scripts executing 'node index.js || true'. The index.js script collects environment variables matching sensitive keywords (e.g., KEY, TOKEN, SECRET, MNEMONIC, WALLET, AWS, GITHUB, NPM) and reads various credential files such as ~/.aws/credentials, ~/.ssh/id_rsa, ~/.kube/config, ~/.docker/config.json, ~/.npmrc, ~/.git-credentials, and others. The harvested data is sent to a hardcoded webhook.site endpoint via a detached child process with a randomized delay to evade detection. The malware also performs hostname regex checks to avoid running on known sandbox or scanner hosts, indicating anti-analysis capabilities.
Potential Impact
Sensitive environment variables and credential files on the installer’s system can be exfiltrated to an attacker-controlled endpoint, potentially leading to credential compromise and unauthorized access to cloud services, source code repositories, and other sensitive resources. This compromises the security of the affected system and any connected infrastructure relying on these credentials.
Mitigation Recommendations
No official patch or remediation guidance is available. Users should avoid installing versions 1.0.0 and 1.0.1 of the @openzeppelin-5/contracts package. Verify package authenticity before installation and consider using trusted package sources or integrity verification mechanisms. Monitor for suspicious network activity related to webhook.site endpoints. Remove the malicious package if already installed and rotate any potentially exposed credentials.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-13738
- Osv Schema Version
- 1.7.4
- Ecosystems
- ["npm"]
Threat ID: 6a7b6fd9bf8831d5393eb02a
Added to database: 08/11/2026, 18:54:17 UTC
Last enriched: 08/11/2026, 19:04:32 UTC
Last updated: 09/18/2026, 17:26:36 UTC
Views: 26
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.