message-compiler

GHSA-pw4h-7785-7vpj

Malicious code in message-compiler (npm)

Details

**Severity:** Critical

**Affected versions:** `= 9.2.0`

## Source: amazon-inspector (f7469b2a666f71db1dd06fd00d6ae630becf97ad6854ff5c8938d2adcb5c8417)
The package declares scripts.preinstall = 'node vishu.js', which runs automatically on npm install. vishu.js resolves the installer's public IP via api.ipify.org, reads CI-related environment variables (CI, GITHUB_ACTIONS, GITHUB_WORKFLOW, GITHUB_RUN_ID and related), and issues an HTTPS GET to a hardcoded webhook.site collector URL carrying those fields. It additionally performs a DNS lookup of a subdomain constructed from os.hostname() under a hardcoded oastify.com (Burp Collaborator) domain, exfiltrating the installer's hostname via DNS. The package name typosquats the scoped @intlify/message-compiler package and its only functional code is this beacon.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/e307a23db650fb76255155feb9c7f2fecd528fef/osv/malicious/npm/message-compiler/MAL-2026-14392.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/e307a23db650fb76255155feb9c7f2fecd528fef/osv/malicious/npm/message-compiler/MAL-2026-14392.json
- https://www.npmjs.com/package/message-compiler/v/9.2.0
- https://github.com/advisories/GHSA-pw4h-7785-7vpj

Compromised versions (1)

= 9.2.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.