ai-sdk-helpers@1.4.1
Malicious code in ai-sdk-helpers (npm)
Analysis
Same cluster as the critical findings: postinstall-with-custom-script confirms the lifecycle hook exists, and investigation showed scripts/postinstall.js is malicious — reads git config, GitHub CLI config, hostname, username, cwd and POSTs to a Cloud Run endpoint.
- analyzed by
- Leitwacht
- first seen
- Jun 7, 2026, 06:20 PM
- analyzed
- Jun 7, 2026, 06:27 PM
Related advisories
- ai-sdk-helpers@1.2.0 same package
- ai-sdk-helpers@1.3.1 same package
- ai-sdk-helpers@1.4.2 same package
- ai-sdk-helpers@0.1.0 same package
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.