OpenSSF/OSV advisory MAL-2026-6375 confirms this npm version as malicious. collect.js bundles a host-reconnaissance and exfiltration payload. It loads child_process, fs, os, http, and https, reads os.hostname() and os.homedir(), enumerates filesystem paths via fs.existsSync(), and POSTs the collected data to the hardcoded endpoint http://aab.sportsontheweb.net (collect.js line 13, POST at line 366)...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in gpt-chat-cli (npm)
Details
collect.js bundles a host-reconnaissance and exfiltration payload. It loads child_process, fs, os, http, and https, reads os.hostname() and os.homedir(), enumerates filesystem paths via fs.existsSync(), and POSTs the collected data to the hardcoded endpoint http://aab.sportsontheweb.net (collect.js line 13, POST at line 366). The destination is unrelated to any documented purpose of a 'GPT chat CLI' package and matches the shape of a system-information stealer. Installing this package places attacker-controlled data-collection code into the install tree.
Decision reason
OpenSSF Malicious Packages via OSV confirms gpt-chat-cli@1.0.2 as malicious (MAL-2026-6375): Malicious code in gpt-chat-cli (npm)