OpenSSF/OSV advisory MAL-2026-13605 confirms this npm version as malicious. The package ships code that binds outbound network calls to a hardcoded non-standard host, https://registry-pxnpm.rdc.nfjbill.ren, from cli/index.js (fetch calls at lines 513, 554, 623 alongside a reference to process.versions for host fingerprinting). Additional files server/proxy/tire.js and server/proxy/csrf.js combine child_process usage with curl-based POST/GET operations, mixing shell command execution with...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in yakuza0 (npm)
Details
The package ships code that binds outbound network calls to a hardcoded non-standard host, https://registry-pxnpm.rdc.nfjbill.ren, from cli/index.js (fetch calls at lines 513, 554, 623 alongside a reference to process.versions for host fingerprinting). Additional files server/proxy/tire.js and server/proxy/csrf.js combine child_process usage with curl-based POST/GET operations, mixing shell command execution with outbound HTTP to non-registry endpoints. The destination host is not the npm registry or a documented publisher domain; its name mimics the format of a private npm registry, and it is invoked from top-level module code paths rather than a user-invoked API. The composition — hardcoded attacker-shaped endpoint, runtime process/version fingerprinting, curl-driven POSTs, and child_process shell execution wired to the same network paths — matches the shape of installer-targeted exfiltration and remote command execution.
Decision reason
OpenSSF Malicious Packages via OSV confirms yakuza0@2.23.40-beta.3 as malicious (MAL-2026-13605): Malicious code in yakuza0 (npm)