MalwarePublished 23 Jun 2026Updated 14 Aug 2026

@ts-apis/ts-utils (npm) · Malicious Code

Affects @ts-apis/ts-utilsSource GCVE Database

Malicious package : remove @ts-apis/ts-utils and rotate any secrets on hosts that installed it.

Data as of 14 Aug 2026, 16:48 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-6275

What to do

Remove @ts-apis/ts-utils from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npm@ts-apis/ts-utils	Affected 1.0.0 – 1.1.0 11 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package @ts-apis/ts-utils contains a malicious backdoor in its published dist/index.js file that executes an obfuscated payload at require() time. This payload harvests a wide range of sensitive credentials and configuration files from the host system, including SSH keys, AWS, Kubernetes, Docker, Git, Google Cloud, Terraform, Azure, Vault, Railway, Solana credentials, environment files, and Linux secrets. It also queries cloud instance metadata services to steal short-lived credentials. The stolen data is encoded and exfiltrated via HTTPS to a remote server. Additionally, the malware establishes a persistent command-and-control channel that can download and execute further malicious binaries and run arbitrary shell commands. The malicious code is deliberately hidden in the distributed build, while the source directory contains only legitimate code, indicating a supply chain compromise. Any system with this package installed should be considered fully compromised.

Impact

Systems with this package installed are fully compromised. The attacker gains access to a wide range of sensitive credentials and secrets stored on the host, including private SSH keys, cloud provider credentials, Kubernetes tokens, and other environment secrets. This enables unauthorized access to cloud resources, source code repositories, container environments, and potentially other infrastructure. The persistent command-and-control channel allows the attacker to execute arbitrary commands and deploy additional malware, leading to complete system takeover. Credential theft and remote control capabilities pose a critical risk to confidentiality, integrity, and availability of affected systems and connected infrastructure.

Defensive guidance

The package should be immediately removed from all systems. All credentials and secrets stored on affected systems must be considered compromised and rotated immediately from a secure, unaffected environment. Due to the high likelihood of full system compromise, affected hosts should be thoroughly audited and potentially rebuilt to ensure removal of all malicious artifacts. Monitor for any signs of further compromise or lateral movement. Avoid using this package until a trusted, clean version is released and verified.

Summary

The @ts-apis/ts-utils npm package versions 1.0.0 through 1.1.0 contain a deliberately backdoored build in the published dist/index.js file. The malicious payload runs shortly after the package is required, harvesting a broad spectrum of sensitive credentials and configuration files from the local filesystem and environment, including SSH keys, AWS credentials, Kubernetes tokens, Docker config, Git credentials, Google Cloud credentials, and various cloud instance metadata endpoints. The collected data is base64-encoded, chunked, and exfiltrated over HTTPS to a remote server. The malware also maintains a persistent command-and-control channel, polling a remote server every 10 seconds to receive commands or download and execute additional payloads. Sensitive strings are obfuscated to evade detection. The source code repository contains only legitimate TypeScript utilities, indicating the malicious payload was introduced during the build or publishing process. This represents a severe supply chain compromise affecting all listed versions.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 14 Aug 2026, 16:48 UTC

Technical details

References

Community reviews