wormgpt-cli@1.0.3: Suspicious npm security report (Warn)

OSV Malicious Advisory

scanned 9d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-13466 confirms this npm version as malicious.

Advisory

MAL-2026-13466

Source

OpenSSF Malicious Packages via OSV

Decision reason

High-risk behavior combination matched malicious policy.

References

OSV advisory

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 126 KB of source, external domains: 13.60.13.215, api.openai.com, opencode.ai, openrouter.ai, wormgpt.io, www.apple.com

Source & flagged code

2 flagged

bin/wormgpt.jsView file

20*/ L21: const { Command } = require('commander'); L22: const os = require('os');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/wormgpt.jsView on unpkg · L20

src/implant/persist.jsView file

7// 3. HKLM\...\Run (system-wide if elevated) L8: // 4. Startup folder .lnk (COM shortcut via PowerShell WScript.Shell) L9: // 5. WMI permanent event subscription (nuclear — no registry, no files, survives everything) ... L15: // 3. cron @reboot L16: // 4. ~/.bashrc + ~/.bash_profile + ~/.profile injection L17: // 5. ~/.xinitrc injection (X11 sessions) ... L33: function hiddenDir() { L34: const home = os.homedir(); L35: const dir = process.platform === 'win32' L36: ? path.join(home, 'AppData', 'Roaming', 'Microsoft', 'Windows Helper') ... L90: const startupDir = path.join( L91: process.env.APPDATA || path.join(os.homedir(), 'AppData', 'Roaming'),

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

src/implant/persist.jsView on unpkg · L7

Source & flagged code

2 flagged · loading source

bin/wormgpt.jsView file

20*/ L21: const { Command } = require('commander'); L22: const os = require('os');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/wormgpt.jsView on unpkg · L20

src/implant/persist.jsView file

7// 3. HKLM\...\Run (system-wide if elevated) L8: // 4. Startup folder .lnk (COM shortcut via PowerShell WScript.Shell) L9: // 5. WMI permanent event subscription (nuclear — no registry, no files, survives everything) ... L15: // 3. cron @reboot L16: // 4. ~/.bashrc + ~/.bash_profile + ~/.profile injection L17: // 5. ~/.xinitrc injection (X11 sessions) ... L33: function hiddenDir() { L34: const home = os.homedir(); L35: const dir = process.platform === 'win32' L36: ? path.join(home, 'AppData', 'Roaming', 'Microsoft', 'Windows Helper') ... L90: const startupDir = path.join( L91: process.env.APPDATA || path.join(os.homedir(), 'AppData', 'Roaming'),

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

src/implant/persist.jsView on unpkg · L7

Findings

1 Critical3 Medium3 Low

CriticalPersistence Backdoorsrc/implant/persist.js

MediumDynamic Requirebin/wormgpt.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings