The @depup/aws-sdk__credential-provider-process npm package is a malicious republished fork of the official AWS SDK credential provider. It impersonates the official package by preserving AWS metadata but injects modified code that intercepts the execution of AWS credential processes. This interception allows the attacker to capture or replace AWS credentials by hooking into the credential materialization path, potentially exposing live AWS credentials to the attacker. The affected versions are specific republished versions with the 'depup' suffix. No official patch or remediation guidance is currently available.