@servicetitan/titan-chatbot-ui@7.1.7
Malicious code in @servicetitan/titan-chatbot-ui (npm)
Analysis
The package @servicetitan/titan-chatbot-ui@7.1.7 is a trojanized clone of a legitimate ServiceTitan chatbot UI library. The preinstall hook (setup.mjs) downloads the Bun JavaScript runtime from github[.]com/oven-sh/bun/releases and executes a 728KB heavily obfuscated payload (math_init.js) containing javascript-obfuscator patterns with eval, Function constructor, and child_process calls. The package ships real-looking React component source code and a CHANGELOG referencing ServiceTitan pull requests as camouflage. It depends on three known-malicious packages (@servicetitan/titan-chat-ui, @servicetitan/titan-chat-ui-common, @servicetitan/titan-chatbot-api). The preinstall hook runs automatically on npm install, downloading and executing the obfuscated payload.
- analyzed by
- Leitwacht
- first seen
- Aug 4, 2026, 11:25 AM
- analyzed
- Aug 4, 2026, 11:28 AM
Related advisories
- @servicetitan/anvil-token@0.4.4
- @servicetitan/cp-mfe-dev@1.115.4
- @servicetitan/grid@0.0.66
- @servicetitan/microfront@0.0.6
- @ornikar/prismic-components@0.0.8
- @ornikar/browserslist-config@8.0.8
- @ornikar/postcss-config@9.1.7
- @ornikar/lerna-config@11.0.6
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.