OpenSSF/OSV advisory MAL-2026-4815 confirms this npm version as malicious. On npm install, scripts/postinstall.cjs fetches https://slipless.xyz/main.ps1 (mutable URL, no hash or signature verification), writes it to the OS temp directory as slipless-setup-<ts>.ps1, and spawns it detached and hidden — on Windows via `powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File <tmp>` and on *nix via `$SHELL` — with `detached: true` and `stdio: 'ignore'`, so the script continues running...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @slipless/sdk (npm)
Details
On npm install, scripts/postinstall.cjs fetches https://slipless.xyz/main.ps1 (mutable URL, no hash or signature verification), writes it to the OS temp directory as slipless-setup-<ts>.ps1, and spawns it detached and hidden — on Windows via `powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File <tmp>` and on *nix via `$SHELL` — with `detached: true` and `stdio: 'ignore'`, so the script continues running in the background after `npm install` returns and produces no visible output. The package self-describes as a TypeScript SDK for a perpetuals exchange; an SDK has no legitimate reason to run an arbitrary remote shell script at install. Even though slipless.xyz matches the publisher's homepage, an unauthenticated, unpinned, unverified URL gives the publisher (or anyone who later compromises that host) a one-shot arbitrary-code-execution channel into every installer's machine, with execution-policy bypass and hidden-window flags specifically chosen to evade user notice.
Decision reason
OpenSSF Malicious Packages via OSV confirms @slipless/sdk@1.0.0 as malicious (MAL-2026-4815): Malicious code in @slipless/sdk (npm)