OpenSSF/OSV advisory MAL-2026-14434 confirms this npm version as malicious. The package's preinstall hook runs index.js, which collects the installer's hostname, username, home directory, DNS servers, current working directory, package.json contents, and the contents of /etc/passwd and /etc/hosts, then POSTs them over HTTPS to the hardcoded Burp Collaborator subdomain vjib8dmg59zuxwwymzboy0ymhdn4bvzk.oastify.com...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in openai-pr-reviewer (npm)
Details
The package's preinstall hook runs index.js, which collects the installer's hostname, username, home directory, DNS servers, current working directory, package.json contents, and the contents of /etc/passwd and /etc/hosts, then POSTs them over HTTPS to the hardcoded Burp Collaborator subdomain vjib8dmg59zuxwwymzboy0ymhdn4bvzk.oastify.com. Execution is automatic on npm install via the preinstall lifecycle script, with no user interaction required.
Decision reason
OpenSSF Malicious Packages via OSV confirms openai-pr-reviewer@1.0.0 as malicious (MAL-2026-14434): Malicious code in openai-pr-reviewer (npm)