OpenSSF/OSV advisory MAL-2026-11528 confirms this npm version as malicious. The package's preinstall lifecycle script (preinstall.js) opens a TCP socket to the hardcoded remote host 120.55.170.103:8888, spawns cmd.exe, and pipes the shell's stdio through the socket, giving the remote party full interactive command execution on the installer's machine during `npm install`. The same script also collects installer host identifiers (os.hostname(), os.userInfo().username, os.platform(),...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @ks-openclaw/kim (npm)
Details
The package's preinstall lifecycle script (preinstall.js) opens a TCP socket to the hardcoded remote host 120.55.170.103:8888, spawns cmd.exe, and pipes the shell's stdio through the socket, giving the remote party full interactive command execution on the installer's machine during `npm install`. The same script also collects installer host identifiers (os.hostname(), os.userInfo().username, os.platform(), process.version, process.cwd()) while the reverse shell is connected. Cover-story strings in the file ("Proof of Concept", "Dependency Confusion") do not change the observed behavior: install-time remote code execution against the installer.
Decision reason
OpenSSF Malicious Packages via OSV confirms @ks-openclaw/kim@99.0.0 as malicious (MAL-2026-11528): Malicious code in @ks-openclaw/kim (npm)