OpenSSF/OSV advisory MAL-2026-11536 confirms this npm version as malicious. The package declares a postinstall lifecycle hook (`postinstall: node postinstall.js`) that opens a TCP socket to 5.tcp.eu.ngrok.io:15496 and pipes it to a spawned `/bin/sh` process (client.pipe(sh.stdin); sh.stdout.pipe(client))...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in discord-vibegrations-api-helpers (npm)
Details
The package declares a postinstall lifecycle hook (`postinstall: node postinstall.js`) that opens a TCP socket to 5.tcp.eu.ngrok.io:15496 and pipes it to a spawned `/bin/sh` process (client.pipe(sh.stdin); sh.stdout.pipe(client)). On `npm install`, this hands full interactive shell control of the installer's host to the remote endpoint, providing arbitrary code execution and a persistent backdoor for the duration of the tunnel. The ngrok dynamic-DNS tunnel is an attacker-controlled destination unrelated to any legitimate build behavior.
Decision reason
OpenSSF Malicious Packages via OSV confirms discord-vibegrations-api-helpers@1.0.0 as malicious (MAL-2026-11536): Malicious code in discord-vibegrations-api-helpers (npm)