VYPR
← All malware advisories

npm · Malicious package advisory

Malware

@signals-notebook/annotation-editor

GHSA-546q-f34h-xwmx

Malicious code in @signals-notebook/annotation-editor (npm)

Details

**Severity:** Critical

**Affected versions:** `= 2.2.60-630109c`

Runs on install. The preinstall script sends the output of `id` (the installing user's identity and groups), base64-encoded, to a request-bin host with curl. This is the dependency-confusion probe pattern; it leaks data from every machine that installs the package. Version examined: 2.2.60-630109c; tarball SHA-256 023e55d33ea70625a746ab25627ea450718c9db722988bd233d370c1587db248.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/65d7c0b05e1069e74e09136ec74ac3530ebad741/osv/malicious/npm/@signals-notebook/annotation-editor/MAL-2026-18604.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/65d7c0b05e1069e74e09136ec74ac3530ebad741/osv/malicious/npm/@signals-notebook/annotation-editor/MAL-2026-18604.json
- https://github.com/advisories/GHSA-546q-f34h-xwmx

Compromised versions (1)

  • = 2.2.60-630109c

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.