w-mousekey@1.0.41
OpenSSF/OSV Malicious Advisory
imported 10d ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-18293 confirms this npm version as malicious.
Advisory
MAL-2026-18293
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in w-mousekey (npm)
Details
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
References
Independent LPM AI assessment
Manual ReviewIndependent AI assessment: manual_review. LPM AI review remains unresolved.
The inspected package code exposes screenshot and mouse/keyboard functions, with no install hook in the manifest. Required native artifacts remain unsupported or only partially analyzed, so a clean verdict is not justified; no independent attack evidence supports a warning or block.
Static reason
No blocking static signals were detected.
Trigger
The screenshot executable is launched when the Windows screenshot helper is called; the AutoHotkey setup executable is launched by its installer command.
Impact
The unresolved native behavior prevents a clean determination; no specific harmful effect was verified.
Mechanism
The screenshot helper runs a bundled executable and reads its output. Available analysis of the AutoHotkey executable leaves native call targets uninspected, and the screenshot executable could not be analyzed in the supported format.
AI rationale
The inspected package code exposes screenshot and mouse/keyboard functions, with no install hook in the manifest. Required native artifacts remain unsupported or only partially analyzed, so a clean verdict is not justified; no independent attack evidence supports a warning or block.
Evidence
_screenCapture/screenCapture_1.3.2.exe_autoHotkey/AutoHotkey64.exe.lpm-inspection-bZhwnQ/1-3880f9ec464d.txt
Independent scan evidence
public snapshotAI called this Manual Review at 90.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest points to the runtime bundle and declares no install lifecycle hook.
- The Windows screenshot helper launches the package's screen capture executable and reads its output; screenshot APIs call that helper.
- The AutoHotkey executable's offline analysis is incomplete and reports uninspected native call targets.
- The screenshot executable is a required native artifact whose behavior could not be inspected in the available analysis.
Evidence against
- The package manifest shows test and deploy scripts but no install hook.
- The screenshot helper is reached through the package's screenshot API, and the screenshot dependency selects platform-specific implementations.
Behavioral surface
ChildProcessEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
6 flagged_screenCapture/screenCapture_1.3.2.exeView file
•path = _screenCapture/screenCapture_1.3.2.exe
kind = native_binary
sizeBytes = 12800
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
_screenCapture/screenCapture_1.3.2.exeView on unpkg_autoHotkey/Install.cmdView file
•path = _autoHotkey/Install.cmd
kind = build_helper
sizeBytes = 66
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
_autoHotkey/Install.cmdView on unpkgpackage.jsonView file
1{
"name": "w-mousekey",
"version": "1.0.41",
"main": "dist/w-mousekey.umd.js",
"dependencies": {
"@techstark/opencv-js": "^4.12.0-release.1",
"json5": "^2.2.3",
"screenshot-desktop": "^1.15.4",
"sharp": "^0.35.5",
"wsemi": "^1.9.21"
},
"devDependencies": {
"playwright": "^1.63.0",
"w-package-tools": "^1.1.21"
},
"scripts": {
"test": "mocha --no-parallel \"test/*.test.mjs\" --timeout 180000",
"deploy": "gh-pages -d docs"
},
"repository": {
Findings
4 High4 Medium4 Low
HighSuspicious Lifecycle Evidencepackage.json
HighAi Review Evidencedist/w-mousekey.umd.js
HighAi Review Evidencedist/w-mousekey.umd.js
HighAi Review Evidence.lpm-dependency-evidence-c9b27cc6-e26d-4b1f-a19d-4ed3c60e6d04/2/npm-linux/index.js
MediumNetwork
MediumShips Native Binary_screenCapture/screenCapture_1.3.2.exe
MediumShips Build Helper_autoHotkey/Install.cmd
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to w-mousekey@1.0.41.
See all versions of w-mousekey for other recorded verdicts.
- Avoid installing w-mousekey@1.0.41. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.