1cat-tunnel-client-zx
1Cat Tunnel Client (ZX Edition) - 基于 1Cat-Tunnel 的客户端，默认连接自建服务器
This report shows the evidence for 1cat-tunnel-client-zx@1.0.3. 2 of 2 known versions are blocked or flagged. See all versions.
OpenSSF/OSV Malicious Advisory
imported 4mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-4778 confirms this npm version as malicious.
Advisory
MAL-2026-4778
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in 1cat-tunnel-client-zx (npm)
Details
On `npm install`, the package's postinstall hook (`node install.js`) fetches a platform-specific executable from `http://156.226.174.161:8888/binaries/tunnel-client-*` over plaintext HTTP, writes it to the package's `bin/` directory, and `chmod 0755`s it. The download URL is hardcoded to a bare IP address, uses cleartext HTTP (no TLS), is not pinned to a version, and the fetched bytes are never hash- or signature-verified before being made executable. The `cli.js` fallback performs the same unverified download on first CLI invocation if the binary is missing. Any on-path network attacker between the installer and 156.226.174.161 — or any future operator of that IP — can substitute arbitrary native code that will then run on the installer's machine. The destination is not a known runtime CDN, not the package publisher's own infrastructure, and the package's stated purpose (a tunnel client) does not justify forgoing TLS or integrity verification. Separately, the README ships plaintext admin credentials for the author's own tunnel server, which is author self-harm and not the basis for this block.
Source & flagged code
0 flagged · loading sourceNo flagged code excerpts are attached to this scan.
Findings
1 High
HighOsv Malicious Advisory
Affected versions and remediation
This report applies to 1cat-tunnel-client-zx@1.0.3.
The versions list below shows the verdict for each recorded version.
- Avoid installing 1cat-tunnel-client-zx@1.0.3. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
This report uses published external intelligence. The advisory does not provide a separate source-code analysis for each listed version.
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.