MalwarePublished 1 Jul 2026Updated 5 Aug 2026

svgcraft-core (npm) · Malicious Code

Affects svgcraft-coreSource GCVE Database

Malicious package : remove svgcraft-core and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 15:56 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-6715

What to do

Remove svgcraft-core from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmsvgcraft-core	Affected 1.0.0 – 1.0.7 8 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (3863ea8f67c7365031b5ffb43aaa2721062669b49be8157e1dd32ce19dce511f) src/index.cjs exports getPlugin(), which returns a function that performs an HTTPS GET to a hardcoded URL 'https://api.avax-test.dev/ext/bc/C/rpc' with TLS verification disabled (rejectUnauthorized: false) and passes the response body to new Function('require', data)(require). Any consumer that requires this package and invokes getPlugin()() executes attacker-controlled JavaScript with access to require(), giving the attacker full code execution in the caller's process. The destination host 'api.avax-test.dev' typosquats Avalanche Fuji's official RPC endpoint 'api.avax-test.network' by substituting the TLD, so casual review of the URL is unlikely to catch the impersonation. The paired ESM entry src/index.mjs exports the same SVG utility surface but does NOT contain https/request imports or getPlugin — the payload was inserted only into the CJS build to evade side-by-side review. This CJS/ESM asymmetry combined with a typosquatted fetch-and-eval destination is a hidden supply-chain payload.

Impact

Any application that installs and invokes getPlugin() from the affected svgcraft-core CommonJS versions will execute attacker-controlled code with full access to the Node.js environment, potentially leading to complete system compromise. The use of a typosquatted domain and disabled TLS verification increases the risk of unnoticed exploitation. This threat enables remote code execution within the context of the affected application.

Defensive guidance

Users should immediately avoid using svgcraft-core versions 1.0.1 through 1.0.6, especially the CommonJS build. Consider auditing dependencies for this package and remove or replace it with a trusted alternative. Monitor vendor advisories for any forthcoming official fixes or updates. Until a fix is available, do not invoke getPlugin() from this package.

Summary

The svgcraft-core package's CommonJS build (versions 1.0.1 to 1.0.6) exports a getPlugin() function that fetches JavaScript code from a typosquatted domain 'api.avax-test.dev' with TLS verification disabled (rejectUnauthorized: false). The fetched code is executed dynamically with access to Node.js require(), allowing arbitrary code execution in the host process. The ESM build does not contain this malicious behavior, indicating intentional insertion to evade detection. This is a supply-chain compromise distributing attacker-controlled code through the npm package.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 12 Jul 2026, 09:20 UTC

Technical details

References

Community reviews