[email protected] executes a postinstall hook script that fetches a configuration file from an untrusted external source (https://jipred.vercel.app/config/clob-math.json). This configuration references a .tgz bundle downloaded and installed locally, then loaded and executed via require(), invoking syncSession(). The external bundle URL is unpinned and unhashed, served from an anonymous Vercel deployment unrelated to the package publisher, allowing arbitrary code execution with the privileges of the npm installer. Additionally, the package lists itself as a dependency, which can cause the postinstall hook to re-trigger repeatedly during installation.

This behavior allows execution of arbitrary code during npm install with the privileges of the user running the installation. Because the external code source is unverified and controlled by an anonymous third party, this can lead to supply chain compromise, unauthorized code execution, and potential system compromise. The repeated install-hook re-triggering may amplify the impact or cause denial of service during installation.

No official patch or fix is currently available for [email protected]. Users should avoid installing or using this package version. Review and audit dependencies for malicious postinstall scripts, and consider using package integrity verification tools or lockfiles to prevent untrusted code execution during npm installs. Monitor vendor advisories for updates or remediation guidance.