hardhat-plus
This report shows the evidence for hardhat-plus@2.21.0, the only known version.
OpenSSF/OSV Malicious Advisory
imported 18d ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-17508 confirms this npm version as malicious.
Advisory
MAL-2026-17508
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in hardhat-plus (npm)
Details
hardhat-plus@2.21.0 is published under a name resembling the Ethereum development tool 'hardhat' but ships README, type definitions, and docs copied verbatim from the unrelated pino logger project (README.md references npmjs.com/package/pino; index.d.ts references github.com/pinojs/pino.git; package.json description is unrelated boilerplate). The package's main entry index.js requires./lib/config, which is a single ~4.5MB heavily obfuscated file using obfuscator.io transforms: hex-named identifiers, a self-mutating shuffled string-array (while(!![]){...f['push'](f['shift']())}), control-flow flattening, dispatched decode helpers, and pervasive \xNN escape literals. This opaque code runs unconditionally the moment the package is imported. There is no legitimate source, minification story, or documented purpose that accounts for a multi-megabyte obfuscated blob being loaded as a 'config' module in a package that presents itself as either a Hardhat plugin or a pino logger. The combination of name-based impersonation, mismatched cover-story documentation, and an obfuscated payload auto-executed on import is the standard delivery shape for supply-chain malware.
References
Independent LPM AI assessment
SuspiciousIndependent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.
Source inspection establishes obscured shell and network behavior reachable through an imported module, supporting a warning. The inspected evidence does not establish malicious commands or an unauthorized recipient strongly enough to justify blocking.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Importing index.js loads lib/config.js; additional internal conditions remain obscured.
Impact
Potential command execution and transmission of collected information warrant warning; specific harmful effects are unconfirmed.
Mechanism
Encoded string lookups conceal shell commands and network request details in the imported module.
AI rationale
Source inspection establishes obscured shell and network behavior reachable through an imported module, supporting a warning. The inspected evidence does not establish malicious commands or an unauthorized recipient strongly enough to justify blocking.
Evidence
index.jslib/config.js
Independent scan evidence
public snapshotAI called this Suspicious at 88.0% confidence as Unknown with medium false-positive risk.
Evidence for AI warning decision
- package.json selects index.js as the entrypoint; index.js immediately loads lib/config.js.
- lib/config.js contains synchronous shell command calls with deliberately obscured command strings.
- lib/config.js includes host information collection and an Axios request carrying constructed data; the destination and effective activation remain obscured.
Evidence against
- package.json has no automatic install lifecycle hooks or runtime self-dependency.
- Inspected source does not establish the decoded commands, network destination, credential theft, or a complete malicious execution chain.
Behavioral surface
ChildProcessEnvironmentVars
HighEntropyStringsMinifiedUrlStrings
Oversized source lightweight scan
Source & flagged code
7 flagged · loading sourceindex.jsView file
3const path = require('path');
L4: const { spawn } = require('child_process');
L5: const { DEFAULT_LEVELS, SORTING_ORDER } = require('./lib/constants');
High
6const config = require('./lib/config');
const { pid } = process;
const defau
High
Ai Review Evidence
package.json selects index.js as the entrypoint; index.js immediately loads lib/config.js.
index.jsView on unpkg · L6lib/config.jsView file
1function gP(z,w,f,S,C){const FR={z:0x1ad};return F(C-FR.z,z);}(function(z,w){const Fu={z:0x3a62,w:0x436a,f:0x6ac5,S:0x1edf,C:0x307e,y:0x586b,l:0x66fa,a:0x5fe2,k:0x610c,o:0x7d37,M:0...
Critical
Download Execute
Source downloads or fetches remote code and executes it.
lib/config.jsView on unpkg · L1Findings
2 Critical4 High3 Medium3 Low
CriticalDownload Executelib/config.js
CriticalTrigger Reachable Dangerous Capabilitylib/config.js
HighChild Processindex.js
HighSemantic Analysis Limitedlib/config.js
HighAi Review Evidencepackage.json
HighAi Review Evidenceindex.js
MediumEnvironment Vars
MediumOversized Source Filelib/config.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to hardhat-plus@2.21.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing hardhat-plus@2.21.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.