test-supply-npm-lib-4

GHSA-94gj-gfw3-p6wc

Malicious code in test-supply-npm-lib-4 (npm)

Details

**Severity:** Critical

**Affected versions:** `= 3.3.3`

## Source: amazon-inspector (80bcbaa6379206627641c70dd25da3c3adfd51337f9a378223a6f8f13c8ba3ed)
package.json declares a dependency `test-supply-npm-git-prepare-proof-4` whose value is a bare git URL (`git+https://[email protected]/agustedone/test-supply-npm-git-prepare-proof-4.git`) rather than a registry version range. On `npm install`, npm clones that repository at mutable HEAD and runs any lifecycle scripts (preinstall/install/postinstall/prepare) it contains, with no version pin, no commit SHA, and no integrity check. Whoever controls the referenced GitHub repository controls code that executes on the installer's machine at install time. The shipped package body is otherwise an inert stub — the manifest line itself is the delivery mechanism.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/3c782fe975b4fb840fee5d496fb7941edfccfd43/osv/malicious/npm/test-supply-npm-lib-4/MAL-2026-17314.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/3c782fe975b4fb840fee5d496fb7941edfccfd43/osv/malicious/npm/test-supply-npm-lib-4/MAL-2026-17314.json
- https://www.npmjs.com/package/test-supply-npm-lib-4/v/3.3.3
- https://www.npmjs.com/package/test-supply-npm-lib-4/v/3.3.4
- https://github.com/ossf/malicious-packages/blob/c1e4a243ed4c50cc2f092b964eb5912dc5c2ba9b/osv/malicious/npm/test-supply-npm-lib-4/MAL-2026-17314.json
- https://www.npmjs.com/package/test-supply-npm-lib-4/v/3.3.5
- https://www.npmjs.com/package/test-supply-npm-lib-4/v/3.3.6
- https://github.com/advisories/GHSA-94gj-gfw3-p6wc

Compromised versions (1)

= 3.3.3

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.