MalwarePublished 10 Jul 2026Updated 5 Aug 2026

uac-package (npm) · Malicious Code

Affects uac-packageSource GCVE Database

Malicious package : remove uac-package and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 15:56 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-10138

What to do

Remove uac-package from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmuac-package	Affected 1.1.0 – 1.4.8 14 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (4d2c2d224834611b638d571689ba89e7ad9b15f59f68a01f403056d02c9278c9) On npm install, uac-package@1.4.7 runs postinstall.js which calls integrate() to silently modify the installer's own source tree without prompt or opt-in: it patches package.json scripts (dev/preview/start), injects `import 'uac-package/track'` into installer entry files (src/main.{js,ts,jsx,tsx}, src/index.{js,ts}), adds a Vite plugin to vite.config.*, and adds a Nuxt module entry to nuxt.config.*. Once wired in, the injected tracker (autoIdentity.mjs, track.mjs) executes in the installer's shipped application and (1) enumerates localStorage/sessionStorage for authentication artifacts across a broad list of identity providers (access_token, id_token, refresh_token, jwt, okta-token-storage, firebase:authUser, @auth0spajs, msal.account.keys, CognitoIdentityServiceProvider, supabase.auth.token, clerk-db, KEYCLOAK_SESSION), decodes JWT payloads, and scans auth cookies; (2) monkey-patches window.fetch and XMLHttpRequest to intercept authentication-endpoint responses; (3) listens on input/change/focusout across form elements and forwards field values (truncated to 200 chars) plus purchase context (order IDs, amounts, product lists) and device/route heartbeats. All collected data is POSTed to the hardcoded author endpoint https://uac-backend.clay.in/api/activities. The behavior is not documented in the README and there is no consent flow. Effect on the installer: shipping this package injects an unauthorized identity-and-input exfiltration pipeline into their production product, exposing their end users' session tokens and form data to a third-party endpoint.

Impact

This malicious behavior exposes sensitive authentication tokens, session cookies, and user input data from the affected applications to an unauthorized external endpoint. This can lead to user account compromise, session hijacking, and leakage of sensitive personal and transactional information. The compromise occurs silently during installation and persists in the shipped application, impacting end users' security and privacy.

Defensive guidance

Users should avoid using the affected versions of uac-package (1.4.1, 1.4.3, 1.4.5, 1.4.6, 1.4.7). Review and remove this package from your projects and replace it with trusted alternatives. Monitor your applications for unauthorized code modifications and network traffic to unknown endpoints.

Summary

The uac-package versions 1.4.1, 1.4.3, 1.4.5, 1.4.6, and 1.4.7 execute a postinstall script that modifies the installer's source tree by patching package.json scripts, injecting imports, and adding plugins/modules to build configurations. The injected tracker code enumerates localStorage and sessionStorage for authentication tokens from many identity providers, decodes JWT payloads, scans authentication cookies, monkey-patches network request methods to intercept authentication responses, and listens to form input events to capture user data and purchase details. All collected data is sent to a hardcoded third-party URL without any consent mechanism, effectively creating a covert identity and input data exfiltration channel embedded in the final application.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 11 Jul 2026, 10:05 UTC

Technical details

References

Community reviews