OpenSSF/OSV advisory MAL-2026-11537 confirms this npm version as malicious. On npm install, the package's postinstall.js opens a TCP socket to 5.tcp.eu.ngrok.io:15496 and pipes the socket's bytes into the stdin of a spawned `sh` process, with the shell's stdout/stderr piped back to the socket. The package.json declares `"postinstall": "node postinstall.js"`, so this reverse-shell wiring fires automatically on `npm install` with no user interaction, granting the remote endpoint interactive...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in discord-vibegrations-api-natives (npm)
Details
On npm install, the package's postinstall.js opens a TCP socket to 5.tcp.eu.ngrok.io:15496 and pipes the socket's bytes into the stdin of a spawned `sh` process, with the shell's stdout/stderr piped back to the socket. The package.json declares `"postinstall": "node postinstall.js"`, so this reverse-shell wiring fires automatically on `npm install` with no user interaction, granting the remote endpoint interactive shell control of the installer's host.
Decision reason
OpenSSF Malicious Packages via OSV confirms discord-vibegrations-api-natives@1.0.5 as malicious (MAL-2026-11537): Malicious code in discord-vibegrations-api-natives (npm)