OpenSSF/OSV advisory MAL-2026-14196 confirms this npm version as malicious. tfjs-custom-module is a typosquat of the tensorflow/tfjs package. Its package.json declares a postinstall lifecycle script that runs automatically on npm install. The script collects installer host identifiers — os.hostname(), process.platform, process.arch, process.version, package name, and the npm lifecycle event — and POSTs them as JSON via https.request to the hardcoded external host...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in tfjs-custom-module (npm)
Details
tfjs-custom-module is a typosquat of the tensorflow/tfjs package. Its package.json declares a postinstall lifecycle script that runs automatically on npm install. The script collects installer host identifiers — os.hostname(), process.platform, process.arch, process.version, package name, and the npm lifecycle event — and POSTs them as JSON via https.request to the hardcoded external host 8xq4kw5d.instances.poc.jchunt.top at path /tfjs-custom-module. The endpoint is not the installer's infrastructure and the beacon is not opt-in. This is host-reconnaissance exfiltration to an author-controlled destination running under a look-alike canary domain, regardless of any self-labeling as security research.
Decision reason
OpenSSF Malicious Packages via OSV confirms tfjs-custom-module@1.0.0 as malicious (MAL-2026-14196): Malicious code in tfjs-custom-module (npm)