test-agency-assignment-01

Details

**Severity:** Critical

**Affected versions:** `= 1.0.5`

## Source: amazon-inspector (2098eadf99f0ffe4dc04f478ed085034d30415cb52201be4f36f688298abc46e)
The tarball contains only package.json and an 8.4 MB Go-compiled Windows executable, Kelimasow.exe (sha256 875c7641dc980538f3c3d8b344d173f97cf64a5d97dcf88d8e2932c83b876b92). package.json declares scripts.postinstall = "Kelimasow.exe", so npm install auto-executes this binary on any Windows host. The package has no library code (main points at a nonexistent index.js), no README, no source, no build system, and empty description/author/repository fields, so there is no advertised purpose that would justify shipping an opaque native executable and no way to inspect what the binary does before it runs. Auto-executing a bundled opaque native binary from a package lifecycle hook, with no accompanying source or declared purpose, is the canonical install-time-RCE dropper shape.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/67d06e2deee9e77ea9bdeec9c2b5592c5d930e15/osv/malicious/npm/test-agency-assignment-01/MAL-2026-17296.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/67d06e2deee9e77ea9bdeec9c2b5592c5d930e15/osv/malicious/npm/test-agency-assignment-01/MAL-2026-17296.json
- https://www.npmjs.com/package/test-agency-assignment-01/v/1.0.5
- https://github.com/advisories/GHSA-w4x6-xq5j-ghhh

Compromised versions (1)

• = 1.0.5

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.