gptcore@4.0.6
Malicious code in gptcore (npm)
T1195.002 · Compromise Software Supply ChainT1059.007 · JavaScriptT1105 · Ingress Tool Transfer
Analysis
The package gptcore@4.0.6 runs a remote code downloader during npm install. The preinstall script (package/preinstall.js) executes mshta.exe to fetch and run an HTA payload from hxxp://fixars[.]top. The main module (gptcore.js) is a decoy LLM API client with no relation to the malicious behaviour. The IOC is the remote host fixars[.]top accessed via mshta on Windows systems.
- analyzed by
- Leitwacht
- first seen
- Jul 12, 2026, 06:56 PM
- analyzed
- Jul 12, 2026, 06:56 PM
Related advisories
- pure-folder-three@0.7.3
- express-request-engine@3.6.3
- @kkael/baileys@8.0.8
- dotnet-runtime-base@1.0.5
- frontend-regulations@99.9.1
- sso-users-detection@99.9.1
- tinyparrot@0.4.1
- svg-fetcher@2.4.1
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.