zod-pino434@1.0.127

Analysis

Package zod-pino434@1.0.127 is a trojanized clone of the legitimate forge-jsx Autodesk Forge integration tool, published under a combosquat name. On npm install, the postinstall hook runs a chain of scripts that spawn a detached background agent process. This agent connects to an encrypted WebSocket command-and-control relay (host embedded as AES-256-GCM ciphertext with an XOR-obfuscated decryption key). The agent captures clipboard contents, logs keystrokes (via uiohook-napi), takes periodic screenshots, reads local filesystem contents, harvests browser extension databases, and collects Discord bot tokens. Collected data is exfiltrated over the WebSocket C2 channel, via Discord webhooks, and through HuggingFace uploads. The agent persists across reboots by registering OS autostart entries and maintaining a hidden runtime directory under .forge-jsxy/. The package has no repository URL or verifiable publisher identity.