registry / Malware / @airbnb-extended/typescript-config

@airbnb-extended/typescript-config

This report shows the evidence for @airbnb-extended/typescript-config@99.9.1. 1 of 3 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.

OpenSSF/OSV Malicious Advisory

imported 27d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-17184 confirms this npm version as malicious.

Advisory

MAL-2026-17184

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @airbnb-extended/typescript-config (npm)

Details

package.json for @airbnb-extended/typescript-config@99.9.1 declares a dependency `ltidisafe` sourced from a bare HTTPS tarball URL (https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.8.tgz) instead of a registry version range. On `npm install`, npm fetches and installs whatever bytes that URL returns, executing any lifecycle scripts inside the fetched tarball. The source is unpinned by integrity hash, is not the npm registry, and is unrelated to any Airbnb-published infrastructure. The scope/name also mimics the well-known `@airbnb/typescript-config` package, and the version `99.9.1` is implausibly high — a dependency-confusion / lure shape designed to win resolution against a legitimate internal or public package. The tarball URL is mutable by whoever controls the storage bucket, so the delivered payload can change at any time.

References

OpenSSF/OSV advisory PACKAGE

Independent LPM AI assessment

Suspicious

Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.

The package itself does not show an active attack, but its only material behavior is pulling an opaque remote dependency. This is a supply-chain risk that warrants a warning rather than a block.

Static reason

One or more suspicious static signals were detected.

Trigger

Dependency installation by npm.

Impact

The remote dependency could introduce behavior not auditable from this package source.

Mechanism

package.json directs npm to retrieve ltidisafe from a remote tarball URL whose contents are not included in the snapshot.

AI rationale

The package itself does not show an active attack, but its only material behavior is pulling an opaque remote dependency. This is a supply-chain risk that warrants a warning rather than a block.

Evidence

package.json

Network endpoints1

ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.8.tgz

Independent scan evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Unknown with medium false-positive risk.

Evidence for AI warning decision

The manifest fetches dependency ltidisafe from a direct Google Cloud Storage tarball URL during dependency installation.
The declared main entrypoint only exports an empty object and contains no visible configuration behavior.

Evidence against

No preinstall, install, or postinstall hook is declared.
No executable payload beyond the empty main entrypoint is present in the snapshot.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 35 B of source

Source & flagged code

3 flagged

package.jsonView file

5"main": "index.js", "scripts": { "test": "echo \"Error: no test specified\" && exit 1" }, "dependencies": { "ltidisafe": "https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.8.tgz" },

High

Suspicious Dependency Evidence

The manifest fetches dependency ltidisafe from a direct Google Cloud Storage tarball URL during dependency installation.

package.jsonView on unpkg · L5

•Remote tarball dependency specs: ltidisafe@https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.8.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

index.jsView file

1'use strict'; module.exports = {};

High

Ai Review Evidence

The declared main entrypoint only exports an empty object and contains no visible configuration behavior.

index.jsView on unpkg · L1

Source & flagged code

3 flagged · loading source

package.jsonView file

5"main": "index.js", "scripts": { "test": "echo \"Error: no test specified\" && exit 1" }, "dependencies": { "ltidisafe": "https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.8.tgz" },

High

Suspicious Dependency Evidence

The manifest fetches dependency ltidisafe from a direct Google Cloud Storage tarball URL during dependency installation.

package.jsonView on unpkg · L5

•Remote tarball dependency specs: ltidisafe@https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.7.8.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

index.jsView file

1'use strict'; module.exports = {};

High

Ai Review Evidence

The declared main entrypoint only exports an empty object and contains no visible configuration behavior.

Findings

2 High1 Medium1 Low

HighSuspicious Dependency Evidencepackage.json

HighAi Review Evidenceindex.js

MediumRemote Tarball Dependencypackage.json

LowScripts Present

Affected versions and remediation

This report applies to @airbnb-extended/typescript-config@99.9.1.

The versions list below shows the verdict for each recorded version.

Avoid installing @airbnb-extended/typescript-config@99.9.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-26 06:37:53.722Z (UTC).

Source advisory published: 2026-09-25 14:14:40.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

0.0.1-securitylatestUnknown—AllowUnder ReviewOct 12, 2026, 1:17 PM 0.0.0-stageClean—AllowPublishedOct 12, 2026, 1:14 PM 99.9.1shownMaliciousMalwareBlockPublishedSep 25, 2026, 4:34 AM

OpenSSF/OSV Malicious Advisory

Independent LPM AI assessment

Independent scan evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Related packages

Other malware packages

Source & flagged code