The publish-poc-base npm package version 1.0.7 contains malicious code in its postinstall script. This script reads the first line of a README.md file from the installer's parent workspace, creates a temporary directory, and writes a new package.json and an .npmrc file containing a hardcoded npm registry authentication token. Although the package does not execute a publish step itself, it distributes a live third-party-usable publish credential in cleartext to all installers and harvests local README content at install time, raising significant supply-chain security concerns.
The npm package 'publish-poc-test3' contains malicious code in its postinstall script that creates a temporary directory with a fabricated package.json and executes an obfuscated 'npm publish' command. This command publishes a new attacker-named package to the public npm registry using the installer's npm authentication credentials. This behavior enables credential abuse and self-propagation of malicious packages under the victim's identity.
@apexacc/cli is a malicious npm package distributed by a fake Web3 accelerator that repackages a legitimate coding agent with added malware. It hijacks AI model traffic to attacker infrastructure, persists a remote control server, and defaults tool approvals to unsafe settings. On Windows, it attempts to weaken system security by disabling Smart App Control and adding Defender exclusions via an elevated PowerShell process, then downloads and executes a large unverified binary that acts as an infostealer. On macOS, it drops a fake password prompt for credential theft and command-and-control. All known versions are affected, and the malicious package remains live on npm as of the last analysis date.
The numbors npm package version 1.6.1 contains heavily obfuscated JavaScript code that prevents clear understanding of its behavior. Although no direct evidence of malicious actions such as credential theft or command-and-control communication was found, the obfuscation hinders verification of its safety. Security sources warn that any system with this package installed should be considered fully compromised, recommending immediate secret and key rotation and removal of the package.
The npm package 'dsh-native' version 1.4.1 contains malicious code that can fully compromise any computer on which it is installed or running. The compromise potentially exposes all stored secrets and keys, which should be rotated immediately from a different machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by its installation.
The npm package util-foriepft@1.0.0 contains malicious code that executes system commands to collect host information and sends this data to a remote server. The package masquerades as a utility helper but includes a module that runs reconnaissance commands and exfiltrates data to an external collector. This behavior indicates a compromise of any system where the package is installed.
The npm package css-grid-snap-util versions 1.0.0 and 1.0.1 contains a stub module and a manifest referencing a webhook.site endpoint. Although the package code does not currently execute outbound network behavior, it is identified as a malicious package. Systems with this package installed should be considered fully compromised, and all secrets and keys on those systems should be rotated immediately. Removal of the package alone may not eliminate all malicious software.
The npm package @regex33-hackerone/tb-compat version 1.0.0 is identified as malicious software. Despite scans showing no detected malicious behavior in the package files themselves, the presence of this package on any computer indicates a full system compromise. It is recommended to remove the package and immediately rotate all secrets and keys from a different, uncompromised machine. There is no guarantee that removing the package will eliminate all malicious software resulting from its installation.
@walknpm/todo-cli version 2.0.1 is a malicious npm package release that includes a postinstall script executing a hidden cryptominer. The script downloads and runs a payload that installs an XMRig Monero miner and helper daemons with persistence mechanisms such as systemd units or cron jobs. This results in unauthorized remote code execution, resource theft, and a difficult-to-remove infection on the host system.
The npm package dsh-plugin-blender-3d version 0.2.1 contains a malicious postinstall script that downloads and executes a payload installing an XMRig cryptocurrency miner and persistent backdoors. The malware installs systemd units or cron jobs for persistence and mines Monero using a hardcoded wallet. If run with root or passwordless sudo, it achieves full persistent agent installation with stealthy system-component-like binaries and relay/tor channels. The package is considered fully compromising to any host where installed.
The canta-baileys npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, secure machine. Removing the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control over the system.
The npm package birch-css-utils, advertised as a zero-runtime CSS theme kit for Tailwind, contains heavily obfuscated JavaScript code that executes on import. This code includes AWS Sigv4 signing primitives and AWS Access Key ID patterns, indicating it is designed to steal AWS credentials from users who import the package. The package's README falsely denies runtime JavaScript, misleading users. Installation or use of this package can lead to full system compromise and credential theft.
The npm package '@capsense/ccx-welcome-page' version 99.99.100 has been identified as malicious due to its communication with a domain linked to malicious activity. This behavior classifies the package as a security threat.
The npm package '@capsense/core-ui' version 99.99.100 has been identified as malicious by the OpenSSF Package Analysis project. The package is flagged because it communicates with a domain associated with malicious activity. There is no CVSS score available, and no known exploits in the wild have been reported. No patch or remediation information is provided.
The w-mousekey npm package versions 1.0.41 and 1.0.42 contain malicious code that compromises any computer on which it is installed or running. This compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, secure device. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'jshelperdependenceny' at version 99.0.0 is a malicious package designed to shadow an internal package of the same name. Upon installation, it executes a script that collects host system information and sends it to an attacker-controlled URL. This behavior constitutes a dependency confusion attack and results in potential full system compromise. Immediate removal and secret/key rotation are advised.
The npm package 'sc-hydrate-carousel-price' version 99.9.1 contains malicious code via a dependency on an externally hosted tarball 'ltidisafe' fetched from an untrusted URL without integrity checks. Installing this package can lead to full system compromise, as the package functions as a loader for externally controlled code. Immediate removal and secret/key rotation are advised.
The npm package paychex-pdftron@99.9.1 is a malicious package that acts as a stub but declares a sole dependency via an unsecured HTTPS tarball URL. Installing this package causes npm to fetch and execute attacker-controlled code without integrity verification, leading to full system compromise. Any system with this package installed should be considered compromised, and all secrets and keys must be rotated. Removal of the package alone may not eliminate all malicious software.
@ppa-web-components/ppa-headerfooter is a malicious npm package designed as a dependency-confusion probe. It executes a postinstall script and code on import that sends system and environment details to a remote server over unencrypted HTTP. The package exports a Proxy that returns no-op functions, providing no real functionality. This package is part of a set of similarly malicious packages published by the same author, indicating a coordinated attempt to gather information from private build environments.
@ppa-web-components/ppa-hotel-collection is a malicious npm package designed as a dependency-confusion probe. It contains a postinstall script and runtime code that exfiltrates system information such as hostname, install path, and working directory to an attacker-controlled server over unencrypted HTTP. The package exports a no-op Proxy to avoid disrupting builds that import the legitimate package. Multiple versions are affected, and the package is part of a broader set of malicious packages published by the same actor.