bnppf-flag-icons

Details

**Severity:** Critical

**Affected versions:** `= 99.99.99`

## Source: amazon-inspector (689227d0fdfe4abc108c7dfc5b5b97e752182a410265c141ca33161247619e78)
The package ships poc.js and wires it to both preinstall and postinstall lifecycle hooks in package.json, so it runs automatically on `npm install`. poc.js requires `os` and `https`, reads `os.hostname()` and `os.userInfo().username`, and sends them via HTTPS GET to a hardcoded webhook.site collector at https://webhook.site/f3d7a882-435a-4959-a4e9-18a3886f3447. The package name suggests a flag-icons library but the shipped code performs only host identifier exfiltration to an anonymous third-party collector; the version 99.99.99 is consistent with a dependency-confusion attempt. Installing the package causes the installer's hostname and OS username to be transmitted to an attacker-controlled endpoint.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/5dc009c150b0f6041bb0a8bd0948882f62e4cfb5/osv/malicious/npm/bnppf-flag-icons/MAL-2026-16350.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/5dc009c150b0f6041bb0a8bd0948882f62e4cfb5/osv/malicious/npm/bnppf-flag-icons/MAL-2026-16350.json
- https://www.npmjs.com/package/bnppf-flag-icons/v/99.99.99
- https://github.com/advisories/GHSA-r56f-8237-82ch

Compromised versions (1)

• = 99.99.99

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.