MalwarePublished 29 May 2026Updated 29 Jun 2026

sorenson-webfonts (npm) · Malicious Code

Affects sorenson-webfontsSource GCVE Database

Malicious package : remove sorenson-webfonts and rotate any secrets on hosts that installed it.

Data as of 29 Jun 2026, 22:17 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-5028

What to do

Remove sorenson-webfonts from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmsorenson-webfonts	Affected =99.9.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package sorenson-webfonts version 99.9.1 is identified as a malicious package designed for dependency confusion attacks. It contains a minimal stub code and pulls an off-registry dependency from a Google Cloud Storage bucket path suggestive of malicious intent. Installing this package can lead to full system compromise, as it executes lifecycle scripts from an untrusted source. Immediate removal and secret/key rotation are recommended if this package is found installed.

Impact

Systems with sorenson-webfonts@99.9.1 installed are at risk of full compromise due to execution of untrusted code from an off-registry source. Attackers may gain complete control over the affected system, potentially accessing all stored secrets and keys. Removal of the package alone may not fully remediate the compromise, necessitating secret and key rotation from a secure environment.

Defensive guidance

Remove the sorenson-webfonts package version 99.9.1 immediately if installed. Rotate all secrets and keys stored on the affected system from a different, trusted computer. Because full system compromise is possible, consider a full system audit and remediation.

Summary

The sorenson-webfonts package at version 99.9.1 is a hollow package with minimal code and placeholder metadata, exhibiting characteristics of a dependency confusion attack. It fetches and executes an off-registry tarball from a Google Cloud Storage bucket path named 'depenconf', which is not subject to npm registry integrity checks or review. The package name does not correspond to its functionality, and it communicates with domains associated with malicious activity. This behavior indicates it is a smuggling vehicle for malicious code rather than a legitimate library. The OpenSSF Package Analysis and other sources classify it as malicious, warning that any system with this package installed should be considered fully compromised.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 29 Jun 2026, 22:17 UTC

Technical details

References

Community reviews