registry / wormgpt-cli / 1.0.1

wormgpt-cli@1.0.1

⚠ Under review

OSV Malicious Advisory

scanned 9d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-13466 confirms this npm version as malicious.

Advisory

MAL-2026-13466

Source

OpenSSF Malicious Packages via OSV

Decision reason

High-risk behavior combination matched malicious policy.

References

OSV advisory

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 126 KB of source, external domains: 13.60.13.215, api.openai.com, opencode.ai, openrouter.ai, wormgpt.io, www.apple.com

Source & flagged code

4 flagged

package.jsonView file

•scripts.postinstall = node -e "require('./src/postinstall.js')" --allow-scripts || true

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "require('./src/postinstall.js')" --allow-scripts || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/wormgpt.jsView file

20*/ L21: const { Command } = require('commander'); L22: const os = require('os');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/wormgpt.jsView on unpkg · L20

src/implant/persist.jsView file

7// 3. HKLM\...\Run (system-wide if elevated) L8: // 4. Startup folder .lnk (COM shortcut via PowerShell WScript.Shell) L9: // 5. WMI permanent event subscription (nuclear — no registry, no files, survives everything) ... L15: // 3. cron @reboot L16: // 4. ~/.bashrc + ~/.bash_profile + ~/.profile injection L17: // 5. ~/.xinitrc injection (X11 sessions) ... L33: function hiddenDir() { L34: const home = os.homedir(); L35: const dir = process.platform === 'win32' L36: ? path.join(home, 'AppData', 'Roaming', 'Microsoft', 'Windows Helper') ... L90: const startupDir = path.join( L91: process.env.APPDATA || path.join(os.homedir(), 'AppData', 'Roaming'),

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

src/implant/persist.jsView on unpkg · L7

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "require('./src/postinstall.js')" --allow-scripts || true

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "require('./src/postinstall.js')" --allow-scripts || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/wormgpt.jsView file

20*/ L21: const { Command } = require('commander'); L22: const os = require('os');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/wormgpt.jsView on unpkg · L20

Findings

2 Critical1 High4 Medium4 Low

CriticalRed Install Lifecycle Scriptpackage.json

CriticalPersistence Backdoorsrc/implant/persist.js

HighInstall Time Lifecycle Scriptspackage.json

MediumDynamic Requirebin/wormgpt.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings