test-agency-assign

GHSA-prg9-6w5p-pqrw

Malicious code in test-agency-assign (npm)

Details

**Severity:** Critical

**Affected versions:** `= 1.0.4`

## Source: amazon-inspector (e650e815b4409c3c07cdab7c953ed69b8052f32a28c3686397ab362bb1bd4552)
[email protected] declares a package.json postinstall script `wscript.exe Kelimasow.exe` that auto-executes a bundled 8.4 MB Go-compiled Windows PE (Kelimasow.exe, sha256 875c7641dc980538f3c3d8b344d173f97cf64a5d97dcf88d8e2932c83b876b92) on `npm install`. The package has no README, empty description and author fields, no source code, and no other functional content — the manifest is a thin wrapper whose sole install-time effect is to execute an opaque native binary on the installer's machine. Opaque binary + lifecycle-hook auto-execution + missing metadata is the canonical install-time RCE / dropper packaging shape, giving whoever published this arbitrary code execution on any Windows host that installs the package.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/67d06e2deee9e77ea9bdeec9c2b5592c5d930e15/osv/malicious/npm/test-agency-assign/MAL-2026-17295.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/67d06e2deee9e77ea9bdeec9c2b5592c5d930e15/osv/malicious/npm/test-agency-assign/MAL-2026-17295.json
- https://www.npmjs.com/package/test-agency-assign/v/1.0.4
- https://github.com/advisories/GHSA-prg9-6w5p-pqrw

Compromised versions (1)

= 1.0.4

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.