OpenSSF/OSV advisory MAL-2026-14253 confirms this npm version as malicious. Package name typosquats `react-dom`. On `require('react-dom-helpers/client')`, client.js decodes a base64-obfuscated Slack bot token and channel ID, enumerates local IPv4 addresses via os.networkInterfaces(), fetches the installer's public IP from api.ipify.org, and POSTs the collected host identifiers to https://slack.com/api/chat.postMessage using the hardcoded bearer token...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in react-dom-helpers (npm)
Details
Package name typosquats `react-dom`. On `require('react-dom-helpers/client')`, client.js decodes a base64-obfuscated Slack bot token and channel ID, enumerates local IPv4 addresses via os.networkInterfaces(), fetches the installer's public IP from api.ipify.org, and POSTs the collected host identifiers to https://slack.com/api/chat.postMessage using the hardcoded bearer token. The exfiltration routine is invoked unconditionally at module load. The base64 wrapping of the Slack credential is used to bypass secret scanners.
Decision reason
OpenSSF Malicious Packages via OSV confirms react-dom-helpers@3.3.3 as malicious (MAL-2026-14253): Malicious code in react-dom-helpers (npm)