atlasora-sdk
This report shows the evidence for atlasora-sdk@1.0.0, the only known version.
OpenSSF/OSV Malicious Advisory
imported 4mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-6240 confirms this npm version as malicious.
Advisory
MAL-2026-6240
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in atlasora-sdk (npm)
Details
Package ships a postinstall hook (`package.json` scripts.postinstall: `node install.js`) that runs automatically on every `npm install`. install.js reads classic installer-secret paths — `~/.ssh/*` (any file containing 'PRIVATE' or 'KEY'), `~/.aws/credentials`, `~/.npmrc`, and `.env` / `.env.local` / `.env.production` from the working directory — and bulk-scrapes 30+ environment variables shaped like credentials (PRIVATE_KEY, AWS_SECRET_ACCESS_KEY, JWT_SECRET, COINBASE_*, SUPABASE_SERVICE_ROLE_KEY, ANTHROPIC_*, etc.), plus host identity (`os.hostname()`, `os.userInfo()`, `git config --list`). The collected bundle is POSTed as JSON over HTTPS to a hardcoded anonymous webhook.site collection URL stored in a variable literally named `EXFIL_SERVER`. The package's `index.js` exports only a stub `{version, name}` — there is no real SDK functionality, despite the package name and description claiming to be the AtlasOra Web3 vacation-rental SDK. This is a brand-impersonation credential harvester targeting AtlasOra developers; any machine that runs `npm install atlasora-sdk` is fully compromised.
References
Source & flagged code
0 flagged · loading sourceNo flagged code excerpts are attached to this scan.
Findings
1 High
HighOsv Malicious Advisory
Affected versions and remediation
This report applies to atlasora-sdk@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing atlasora-sdk@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
This report uses published external intelligence. The advisory does not provide a separate source-code analysis for each listed version.
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.