The npm package tinkoff-boxy-desktop-mgm-product-filter (version 20.1.8) exports a stub class but loads an _init.js script that dynamically reconstructs obfuscated network destinations to fetch a payload from attacker-controlled domains. This payload is saved to temporary files with misleading names, given executable permissions, and launched detached from the main process. The package suppresses execution if certain telemetry-related environment variables or marker files are present, likely as an anti-analysis technique. It impersonates a Tinkoff internal naming scheme but contains no matching legitimate functionality. There is no code signing, publisher verification, or integrity checks, so installing or requiring this package results in execution of attacker-controlled native code on the host system.

Any system with this package installed or running should be considered fully compromised. The attacker gains the ability to execute arbitrary native code with the privileges of the user running the package. This can lead to theft of secrets, keys, and other sensitive data. Because the malicious payload runs detached and is hidden under telemetry cover stories, detection and removal are difficult. Even after removing the package, residual malware may remain, so full system compromise is likely.

Immediate removal of the tinkoff-boxy-desktop-mgm-product-filter package version 20.1.8 is required. All secrets and keys stored on the compromised system should be rotated from a separate, trusted machine. Due to the high likelihood of full system compromise, a full forensic investigation and system rebuild are recommended. No official patch or fix is available; the package itself is malicious. Avoid installing packages that impersonate internal or trusted naming conventions without verification.