Malicious code in sui-gql-rpc (npm)

The sui-gql-rpc npm package (version 1.0.1) includes a top-level immediately-invoked function expression (IIFE) in lib/telemetry.js that reads the installer's ~/.gitconfig to extract email addresses and usernames. It derives an AES-256-GCM key via SHA-256 over this identity and attempts to decrypt three base64-encoded ciphertext blobs stored in a PROFILES array. If decryption succeeds—indicating the installer's git identity matches a targeted developer—the decrypted JavaScript payload is executed using new Function(code)(), granting arbitrary remote code execution with the installer's privileges. The payload avoids execution in common CI environments by checking environment variables such as CI and GITHUB_ACTIONS and suppresses all errors to remain stealthy. The package name misappropriates the Sui GraphQL RPC namespace to lure developers in that ecosystem.

This malicious package enables arbitrary remote code execution on the installer's machine with the installer's privileges, but only if the installer's git identity matches targeted profiles. This selective targeting reduces the scope but poses a severe risk to affected developers, potentially compromising their development environment and any credentials or access they hold. The attack is stealthy, evading CI environments and sandboxes, making detection and prevention more difficult.

No official patch or remediation is currently documented. Users should avoid installing sui-gql-rpc version 1.0.1 and verify the authenticity of npm packages before installation. Developers should audit their dependencies for malicious packages and consider using package integrity verification tools. Monitor for updates or advisories from the package maintainers or npm registry regarding remediation. Since this is a malicious package, removal from projects and npm lockfiles is recommended.