Malicious code in syco1 (npm)
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (e43be65a0930b121cf4d610c70b2d07165e4d335dece4344590b471d078fa5b5) Package self-describes as a 'System binary configuration tool' but ships a covert screen and clipboard surveillance overlay. pointer.py captures full-screen JPEG screenshots (mss/ImageGrab), reads clipboard text on a 300ms loop (pyperclip.paste), and scrapes on-screen UI text from arbitrary windows via UI Automation; all captured data is POSTed unconditionally to a hardcoded author-controlled endpoint at https://new-pointer.vercel.app/api (pointer.py:33 VERCEL_API_URL). The destination is not configurable. The UX is built for concealment: an overrideredirect always-on-top transparent overlay (alpha 0.75, transparent-white) and hidden hotkeys including ctrl+q panic_exit (os._exit), esc stealth_hide, and 1+` stealth_show. The npm wrapper (index.js startApp) additionally performs a silent 'ghost install' of Python 3.12.3 from python.org into %TEMP% via curl, executed with /quiet InstallAllUsers=0 PrependPath=1 and comments explicitly describing the goal as 'No UI, No Admin Popup' — bootstrapping the Python runtime required by pointer.py without user consent. Any developer who runs the package's bin entry ships their clipboard contents, on-screen text, and screenshots of their primary monitor to the author's server. The shape is consistent with a proctoring-evasion / surveillance tool, not a sysadmin utility. ## Source: ghsa-malware (4cdfeaff9ba72cf95d0e701523049f137b60eadc9b54950e7c20ec3c87b59758) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
AI Analysis
Technical Summary
The 'syco1' npm package (versions 1.0.3 and 1.0.4) masquerades as a system binary configuration tool but implements covert surveillance by capturing screenshots, clipboard data, and on-screen text via Python scripts. It exfiltrates this sensitive information to a hardcoded endpoint (https://new-pointer.vercel.app/api) without user configuration options. The package silently installs a Python runtime in the user's temporary directory to facilitate these operations. Its user interface is designed for concealment using a transparent overlay and stealth hotkeys. This behavior indicates the package is a malicious surveillance tool rather than a legitimate utility. Any system running this package should be considered fully compromised.
Potential Impact
Systems with 'syco1' versions 1.0.3 or 1.0.4 installed or running are subject to full compromise due to covert exfiltration of sensitive data including screenshots, clipboard contents, and on-screen text. This exposure risks leakage of secrets, credentials, and other confidential information. The package's silent installation of Python and persistent surveillance capabilities mean removal of the package alone may not eliminate all malicious components or access. Immediate security measures are required to address potential data breaches and system control loss.
Mitigation Recommendations
No official patch or remediation is currently available. Users should immediately uninstall versions 1.0.3 and 1.0.4 of the 'syco1' package. Given the high likelihood of full system compromise, all secrets and keys stored on affected machines should be rotated from a separate, trusted device. Comprehensive incident response and forensic analysis are recommended to identify and remove any additional malicious artifacts. Monitor for unauthorized Python installations in temporary directories and network connections to the hardcoded exfiltration endpoint. Exercise caution when installing npm packages from untrusted sources.
Malicious code in syco1 (npm)
Description
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (e43be65a0930b121cf4d610c70b2d07165e4d335dece4344590b471d078fa5b5) Package self-describes as a 'System binary configuration tool' but ships a covert screen and clipboard surveillance overlay. pointer.py captures full-screen JPEG screenshots (mss/ImageGrab), reads clipboard text on a 300ms loop (pyperclip.paste), and scrapes on-screen UI text from arbitrary windows via UI Automation; all captured data is POSTed unconditionally to a hardcoded author-controlled endpoint at https://new-pointer.vercel.app/api (pointer.py:33 VERCEL_API_URL). The destination is not configurable. The UX is built for concealment: an overrideredirect always-on-top transparent overlay (alpha 0.75, transparent-white) and hidden hotkeys including ctrl+q panic_exit (os._exit), esc stealth_hide, and 1+` stealth_show. The npm wrapper (index.js startApp) additionally performs a silent 'ghost install' of Python 3.12.3 from python.org into %TEMP% via curl, executed with /quiet InstallAllUsers=0 PrependPath=1 and comments explicitly describing the goal as 'No UI, No Admin Popup' — bootstrapping the Python runtime required by pointer.py without user consent. Any developer who runs the package's bin entry ships their clipboard contents, on-screen text, and screenshots of their primary monitor to the author's server. The shape is consistent with a proctoring-evasion / surveillance tool, not a sysadmin utility. ## Source: ghsa-malware (4cdfeaff9ba72cf95d0e701523049f137b60eadc9b54950e7c20ec3c87b59758) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The 'syco1' npm package (versions 1.0.3 and 1.0.4) masquerades as a system binary configuration tool but implements covert surveillance by capturing screenshots, clipboard data, and on-screen text via Python scripts. It exfiltrates this sensitive information to a hardcoded endpoint (https://new-pointer.vercel.app/api) without user configuration options. The package silently installs a Python runtime in the user's temporary directory to facilitate these operations. Its user interface is designed for concealment using a transparent overlay and stealth hotkeys. This behavior indicates the package is a malicious surveillance tool rather than a legitimate utility. Any system running this package should be considered fully compromised.
Potential Impact
Systems with 'syco1' versions 1.0.3 or 1.0.4 installed or running are subject to full compromise due to covert exfiltration of sensitive data including screenshots, clipboard contents, and on-screen text. This exposure risks leakage of secrets, credentials, and other confidential information. The package's silent installation of Python and persistent surveillance capabilities mean removal of the package alone may not eliminate all malicious components or access. Immediate security measures are required to address potential data breaches and system control loss.
Mitigation Recommendations
No official patch or remediation is currently available. Users should immediately uninstall versions 1.0.3 and 1.0.4 of the 'syco1' package. Given the high likelihood of full system compromise, all secrets and keys stored on affected machines should be rotated from a separate, trusted device. Comprehensive incident response and forensic analysis are recommended to identify and remove any additional malicious artifacts. Monitor for unauthorized Python installations in temporary directories and network connections to the hardcoded exfiltration endpoint. Exercise caution when installing npm packages from untrusted sources.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-6404
- Osv Schema Version
- 1.7.4
- Aliases
- ["GHSA-9mh8-xw8w-jh9g"]
- Ecosystems
- ["npm"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a4e4f07c9d9e3dbe328de20
Added to database: 07/08/2026, 13:22:15 UTC
Last enriched: 07/08/2026, 13:50:25 UTC
Last updated: 07/27/2026, 00:01:21 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.