godot-kit@1.0.1786316795: Malicious npm security report (Block)

OSV Malicious Advisory

scanned 5d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-13723 confirms this npm version as malicious. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

Advisory

MAL-2026-13723

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in godot-kit (npm)

Details

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

Decision reason

One or more suspicious static signals were detected.

References

OSV advisory ADVISORY

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 19.7 KB of source, external domains: eth-mainnet.public.blastapi.io

Source & flagged code

6 flagged

test.jsView file

6const path = require('path'); L7: const { execFileSync } = require('child_process'); L8:

High

Child Process

Package source references child process execution.

test.jsView on unpkg · L6

6Cross-file remote execution chain: test.js spawns lang/gdscript.js; helper contains network access plus dynamic code execution. L6: const path = require('path'); L7: const { execFileSync } = require('child_process'); L8: L9: const GODOT_BIN = process.env.GODOT_BIN || (process.platform === 'win32' ? 'godot.exe' : 'godot'); L10: L11: function assert(cond, msg) { L12: if (!cond) { console.error('FAIL:', msg); process.exitCode = 1; } L13: else console.log('ok:', msg); ... L28: L29: execFileSync(process.execPath, [path.join(__dirname, 'bin', 'install.js'), tmpProject], { encoding: 'utf8' }); L30:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

test.jsView on unpkg · L6

3// through the real Godot binary. No mocks. Requires GODOT_BIN or `godot`/`godot.exe` on PATH. L4: const fs = require('fs'); L5: const os = require('os');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test.jsView on unpkg · L3

lang/gdscript.jsView file

92Requires: game running for eval, or Godot binary on PATH (or GODOT_BIN env var) for headless.`, L93: }; ... L94:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lang/gdscript.jsView on unpkg · L92

92Requires: game running for eval, or Godot binary on PATH (or GODOT_BIN env var) for headless.`, L93: }; ... L94:

Low

Eval

Package source references a known benign dynamic code generation pattern.

lang/gdscript.jsView on unpkg · L92

bin/install.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: s.writefilesync(projectgodotpath, content, 'utf8'); return true; } function ensureeditorplugin(projectgodotpath) { let content = fs.existssync(projectgodotpath) ? fs.readfilesync(projectgodotpath, 'utf8') : ''; if (content.includes('godot_kit_bridge')) return false; const pluginpath = '"res://addons/godot_kit_bridge/plugin.cfg"'; const section = /\[editor_plugins\]\s*\n\s*enabled=packedstringarray$([^)]*)$/; const m = content.match(section); if (m) { const existing = m[1].trim(); const merged = existing ? existing + ', ' + pluginpath : pluginpath; content = content.replace(section, `[editor_plugins]\n\nenabled=packedstringarray(${merged})`); } else { content += (con

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/install.jsView on unpkg

Source & flagged code

6 flagged · loading source

test.jsView file

6const path = require('path'); L7: const { execFileSync } = require('child_process'); L8:

High

Child Process

Package source references child process execution.

test.jsView on unpkg · L6

6Cross-file remote execution chain: test.js spawns lang/gdscript.js; helper contains network access plus dynamic code execution. L6: const path = require('path'); L7: const { execFileSync } = require('child_process'); L8: L9: const GODOT_BIN = process.env.GODOT_BIN || (process.platform === 'win32' ? 'godot.exe' : 'godot'); L10: L11: function assert(cond, msg) { L12: if (!cond) { console.error('FAIL:', msg); process.exitCode = 1; } L13: else console.log('ok:', msg); ... L28: L29: execFileSync(process.execPath, [path.join(__dirname, 'bin', 'install.js'), tmpProject], { encoding: 'utf8' }); L30:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

test.jsView on unpkg · L6

3// through the real Godot binary. No mocks. Requires GODOT_BIN or `godot`/`godot.exe` on PATH. L4: const fs = require('fs'); L5: const os = require('os');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

Findings

4 High3 Medium5 Low

HighChild Processtest.js

HighSame File Env Network Executionlang/gdscript.js

HighExternal Ai Agent Control Surface Mutationbin/install.js

HighCross File Remote Execution Contexttest.js

MediumDynamic Requiretest.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEvallang/gdscript.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings