astro

GHSA-hpcx-pg6g-x697

Malicious code in astro (npm)

Details

**Severity:** Critical

**Affected versions:** `= 7.1.0`

## Source: amazon-inspector (949822741657acf4a6b9f6255a2f7a080ca1cc3343e9663020c5e21ce2a6b03c)
This tarball is published as [email protected] but does not match the legitimate withastro/astro project (which is on the v5.x line and depends on picocolors, debug, and @astrojs/markdown-remark). The package.json declares dependencies on typosquat-shaped names on the same registry: piccolore, obug, and @astrojs/markdown-satteri. Core modules import these look-alikes unconditionally — dist/core/logger/node.js contains `import { createDebug, enable as obugEnable } from "obug"` and dist/cli/infra/piccolore-text-styler.js contains `import colors from "piccolore"` — so any `require('astro')` or CLI invocation causes those attacker-controlled packages to be resolved and executed inside the installer's node_modules tree. The version jump from the real 5.x line and the substitution of the standard utility dependencies with lookalike names indicate a registry impersonation of the astro framework, structured as a dependency-chain dropper.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/b9106eb680591c55d453ba1074d388eafca5b0f4/osv/malicious/npm/astro/MAL-2026-10726.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/b9106eb680591c55d453ba1074d388eafca5b0f4/osv/malicious/npm/astro/MAL-2026-10726.json
- https://www.npmjs.com/package/astro/v/7.1.0
- https://github.com/advisories/GHSA-hpcx-pg6g-x697

Compromised versions (1)

= 7.1.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.