The trailserver npm package (version 1.0.5) includes a malicious main entry script (launcher.js) that triggers a system-level Python installation if not present, installs Python packages (pyperclip, keyboard, pyautogui, pillow, requests), and executes a bundled Python script (client/noderzero.py). This script continuously monitors the clipboard, captures full-screen and OCR-selected screenshots, registers global keyboard hooks, and auto-types content into other applications. All captured data (text and images) is exfiltrated via HTTP POST requests to a hardcoded URL (https://trailserver.vercel.app/api), which is not configurable by the user. The payload hides its UI using transparent overlays and provides a hidden panic-exit via ctrl+q. This behavior constitutes a stealthy surveillance agent delivered upon installation or import of the package.

Installation or import of the trailserver package version 1.0.5 results in a stealthy surveillance agent on the victim's machine that can capture sensitive clipboard data, screenshots (including OCR-processed regions), and keystrokes. This data is exfiltrated to an attacker-controlled server, potentially leading to significant confidentiality breaches and privacy violations. The attacker gains remote access to sensitive user input and screen content without user consent or awareness.

No official patch or remediation is currently documented for this malicious package version. Users should avoid installing or importing trailserver version 1.0.5. Remove any existing installations of this package and scan affected systems for the presence of the Python payload and related artifacts. Monitor network traffic for connections to https://trailserver.vercel.app/api and block this domain at network perimeter controls. Since this is a malicious package, the best mitigation is to avoid use and remove it if found. Patch status is not yet confirmed — check the vendor advisory or trusted security sources for updates.