OpenSSF/OSV advisory MAL-2026-14192 confirms this npm version as malicious. The package name typosquats TensorFlow.js and its npm postinstall lifecycle script collects installer host identifiers (hostname, platform, arch, Node.js version, package name) and POSTs them as JSON to the hardcoded third-party host zl2u2d1x.instances.poc.jchunt.top at path /tfjs-inference. The exfiltration fires automatically on `npm install` with no opt-in and no configuration...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in tfjs-inference (npm)
Details
The package name typosquats TensorFlow.js and its npm postinstall lifecycle script collects installer host identifiers (hostname, platform, arch, Node.js version, package name) and POSTs them as JSON to the hardcoded third-party host zl2u2d1x.instances.poc.jchunt.top at path /tfjs-inference. The exfiltration fires automatically on `npm install` with no opt-in and no configuration. Internal comments self-label the package as a security research canary, but the destination is author-controlled and the installer receives no notice or consent prompt.
Decision reason
OpenSSF Malicious Packages via OSV confirms tfjs-inference@1.0.0 as malicious (MAL-2026-14192): Malicious code in tfjs-inference (npm)