OpenSSF/OSV advisory MAL-2026-12427 confirms this npm version as malicious. Package version 9999.0.0 is published with placeholder metadata ("Shared utility helpers.", no author) — the canonical shape of a dependency-confusion squat designed to override an internal package of the same name during resolution. On `npm install`, the `scripts.preinstall` hook runs `node callback.js`, which reads `os.hostname()`, `os.userInfo().username`, the current working directory, the configured npm...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in remote_session_elements (npm)
Details
Package version 9999.0.0 is published with placeholder metadata ("Shared utility helpers.", no author) — the canonical shape of a dependency-confusion squat designed to override an internal package of the same name during resolution. On `npm install`, the `scripts.preinstall` hook runs `node callback.js`, which reads `os.hostname()`, `os.userInfo().username`, the current working directory, the configured npm registry, and CI-provided repository identifiers (e.g. `process.env.GITHUB_REPOSITORY`) and sends them via HTTP GET to `http://75.119.137.232:31337/depconfuse?pkg=...`, a hardcoded bare-IP endpoint over cleartext HTTP. This provides an external operator with the internal package name, host identity, and originating CI repository slug of every environment where the squat is installed — reconnaissance for further dependency-confusion attacks against the victim's internal package namespace.
Decision reason
OpenSSF Malicious Packages via OSV confirms remote_session_elements@9999.0.0 as malicious (MAL-2026-12427): Malicious code in remote_session_elements (npm)