ai-sdk-helpers@1.1.0
Malicious code in ai-sdk-helpers (npm)
T1195.002 · Compromise Software Supply ChainT1059 · Command and Scripting InterpreterT1546.016 · Installer PackagesT1082 · System Information DiscoveryT1552.001 · Credentials In FilesT1567 · Exfiltration Over Web Service
Analysis
Same cluster as the critical findings: postinstall-with-custom-script confirms the lifecycle hook exists, and investigation showed scripts/postinstall.js is malicious — reads git config, GitHub CLI config, hostname, username, cwd and POSTs to a Cloud Run endpoint.
- analyzed by
- Leitwacht
- first seen
- Jun 7, 2026, 06:19 PM
- analyzed
- Jun 7, 2026, 06:27 PM
Related advisories
- ai-sdk-helpers@1.2.0 same package
- ai-sdk-helpers@1.3.1 same package
- ai-sdk-helpers@1.4.2 same package
- ai-sdk-helpers@0.1.0 same package
- ai-sdk-helpers@0.3.2 same package
- ai-sdk-helpers@0.5.0 same package
- ai-sdk-helpers@1.0.0 same package
- ai-sdk-helpers@1.0.1 same package
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.