The npm package 'cjlowuxbnexkhgpzq' contains malicious code that compromises any computer on which it is installed or running. Installation of this package may lead to full system compromise, risking exposure of all stored secrets and keys. Immediate removal of the package is advised, but due to potential full control by an attacker, removal alone may not eliminate all malicious components.
The npm package 'bcxhdh1kjlopsde' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, clean computer. Removing the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control over the system.
The npm package mw-communication-client contains malicious preinstall and postinstall scripts that send the installer's OS username, hostname, and current working directory via unencrypted HTTP requests to an attacker-controlled IP address. The package has no functional code and is a dependency-confusion proof of concept targeting private internal package names. It leaks sensitive environment information during installation without executing further code.
The npm package mw-test-utils (versions 1.0.0, 10.0.0, and 10.0.1) contains malicious preinstall and postinstall scripts that send the installing user's environment username, hostname, and working directory via unencrypted HTTP requests to a hardcoded IP address. The package contains no functional code and is labeled as a dependency-confusion proof of concept, but the scripts execute automatically on every install, potentially leaking sensitive environment information.
The npm package mui-wrapper-x-date-pickers versions 1.0.0 and 10.0.0 contains malicious preinstall and postinstall scripts that send the installer's OS username, hostname, and current working directory in plaintext HTTP requests to an untrusted external IP address. The package mimics the naming pattern of a legitimate internal package to exploit dependency confusion. No other code execution or payload is present beyond these data exfiltration requests.
The npm package monte-md-baileys version 1.0.0 is a malicious fork of the Baileys WhatsApp Web library that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. It achieves this by injecting code that issues an authenticated FOLLOW query using the victim's own WhatsApp session. The targeted channel identifiers are obfuscated or dynamically fetched to evade detection. This behavior does not involve credential theft, persistence, or remote code execution.
The noxleyss npm package is part of a large family of malicious forks of the Baileys WhatsApp Web library that inject code to silently subscribe the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by issuing an authenticated FOLLOW query using the victim's own WhatsApp session. The targeted channel IDs are obfuscated or dynamically fetched, allowing attackers to change targets post-installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The @rennnpm/baileys npm package version 1.0.0 is a malicious fork of the Baileys WhatsApp Web library that injects code to silently subscribe the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by issuing an authenticated 'w:mex' FOLLOW query using the victim's own WhatsApp session. The target channels are obfuscated or dynamically fetched to evade detection. The malicious code does not exfiltrate credentials, establish persistence, or execute arbitrary remote code.
The seapy-ops package on PyPI, versions 1.0.0 through 1.2.2, contains malicious functionality hidden behind undocumented commands. It masquerades as a local file analysis tool but includes backdoor features that exfiltrate files from the user's working directory to an attacker-controlled server and allow remote code execution. The package uploads files recursively, including via symlinks, and can write arbitrary files into the working directory based on server responses. Later versions implement a Python REPL that sends input to the server and executes server-supplied code in memory, disguising errors to conceal activity. These behaviors were confirmed through isolated testing with synthetic credentials and mocked servers, without contacting live endpoints.
The npm package @testsecuiitytestme/cache-helper is a malicious package that installs a credential stealer and self-propagating worm. It executes a native addon at install time that loads an obfuscated Bun program to collect a wide range of credentials and secrets from developer machines. The malware targets credentials from npm, GitHub, GitLab, PyPI, RubyGems, cloud providers (AWS, GCP, Azure), HashiCorp Vault, Kubernetes, SSH keys, browser logins, and password managers. It also propagates by publishing malicious packages and injecting CI/CD workflow changes and AI assistant configurations. The package was published and updated multiple times on October 27, 2026, then unpublished shortly after. Users who installed any version should consider all accessible credentials compromised and rotate them immediately.
The dsh-volcengine-provider npm package versions 0.2.5 and 0.2.8 contain malicious code. Any system with this package installed or running should be considered fully compromised, with potential unauthorized access to secrets and keys. Immediate removal of the package and rotation of all secrets from a separate, uncompromised system is strongly advised.
The npm package dsh-redteam-mode version 0.15.2 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by the package.
A malicious npm package named spectral-core impersonates a legitimate project and executes code during installation to steal sensitive environment variables and AWS EC2 metadata. It collects CI/CD secrets, cloud credentials, network reconnaissance data, and sends this information to a hardcoded external server. The package contains no functional library code and uses a binding.gyp file solely to run the malicious script at install time.
The npm package @dmangal/curse-dependent-ecto contains malicious code embedded in its binding.gyp file. During installation, it executes a node script that searches for files containing the marker 'HTB{' and reads sensitive files and environment variables. It then exfiltrates this data, including CI secrets and API tokens, to an attacker-controlled endpoint. The package uses an implausibly high version number consistent with a dependency confusion attack. Installing this package in developer or CI environments risks leaking confidential information to attackers.
The b20miner npm package version 0.3.1 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised computer. Removal of the package alone may not eliminate all malicious software introduced by its installation.
The npm package @zaip-ai/cli contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by the package.
The npm package itsa-utils version 1.4.2 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control over the system.
The npm package 'itsa-react-checkbox' version 16.0.5 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removal of the package alone may not eliminate all malicious software introduced by it.
The npm package 'mock-transactions-sdk' contains malicious code that fully compromises any computer on which it is installed or running. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is advised, but due to the extent of the compromise, complete remediation may require rotating all secrets and keys from a separate, uncompromised machine.
The npm package 'transaction-info-generate-sdk' contains malicious code that fully compromises any computer on which it is installed or running. The compromise includes potential unauthorized access to all secrets and keys stored on the affected machine. Removal of the package alone does not guarantee elimination of the malicious software, as full control may have been granted to an external attacker.