ai-sdk-helpers@0.1.2
Malicious code in ai-sdk-helpers (npm)
T1195.002 · Compromise Software Supply ChainT1059 · Command and Scripting InterpreterT1546.016 · Installer PackagesT1082 · System Information DiscoveryT1552.001 · Credentials In FilesT1567 · Exfiltration Over Web Service
Analysis
Same ai-sdk-helpers cluster as earlier critical findings. All versions (0.1.0 through 0.3.0) ship identical postinstall.js that reads PII (git email, GitHub identity, hostname, cwd) and POSTs to a Cloud Run endpoint. Same evidence applies.
- analyzed by
- Leitwacht
- first seen
- Jun 7, 2026, 06:19 PM
- analyzed
- Jun 7, 2026, 06:27 PM
Related advisories
- ai-sdk-helpers@1.2.0 same package
- ai-sdk-helpers@1.3.1 same package
- ai-sdk-helpers@1.4.2 same package
- ai-sdk-helpers@0.1.0 same package
- ai-sdk-helpers@0.2.0 same package
- ai-sdk-helpers@0.2.1 same package
- ai-sdk-helpers@0.3.0 same package
- ai-sdk-helpers@0.3.1 same package
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.