Malicious code in ai-texts (npm)
The npm package ai-texts contained malicious code that downloads and executes a platform-specific installer from an author-controlled domain (anymeetvia.com) upon module import, with no verification or documentation of this behavior.
- Disclosed
- Last updated
- Blast radius
- Any developer or system that installed the ai-texts package and required/imported it would execute the dropper unconditionally.
- Ecosystems
- Attack vectors
- Affected entities
- ai-textsnpm package advertising text helpers for AI pipelines but containing malicious dropper code
The npm package ai-texts was published with malicious code embedded in src/index.js. The package advertises itself as providing text helper utilities (toText/normalizeText) for AI pipelines, but the module unconditionally executes a dropper at the top level when required or imported.\n\nThe dropper downloads a platform-specific installer from https://anymeetvia.com/download/{win|mac-x86_64|linux}/install1[.ps1] into the OS temporary directory. On macOS and Linux, the installer is made executable (chmod 0755) and run via bash; on Windows, it is executed via powershell -File. After execution, the process exits.\n\nNo version pinning, hash verification, or signature validation is performed on the downloaded installer. The remote endpoint is controlled by the package author and is unrelated to the advertised text-helper functionality. The dropper behavior is not documented in the README or module exports, making it a hidden malicious payload.\n\nThe incident was identified by the OpenSSF malicious-packages project and reported via GitHub Security Advisory GHSA-q65f-7mj7-2qvj on 2026-08-19.
Indicators of compromise
- Packages
- ai-texts
- Domains
- anymeetvia.com
Remediation
- Immediately uninstall the ai-texts package from all systems
- Audit npm install logs to identify any systems that may have installed or imported ai-texts
- Inspect systems that imported ai-texts for signs of unauthorized installer execution or persistence mechanisms
- Review the anymeetvia.com domain and any downloaded installer artifacts for indicators of compromise
- Use npm audit to check for the presence of ai-texts in dependency trees
- Consider implementing package signature verification and allowlisting in your npm configuration
Sources
- GitHub Advisory GHSA-q65f-7mj7-2qvj · GitHub Advisory Database
Cite this entry
"Malicious code in ai-texts (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 19, 2026; last updated August 19, 2026. https://supplychainattack.org/incident/malicious-code-in-ai-texts-npm-1osf7t
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in 3-buildsight-web (npm)
The npm package 3-buildsight-web contains malicious code that fetches and executes arbitrary JavaScript from a remote Bitbucket URL on module load, granting full page privileges to an unverified third party.
npmCompromised package - resolvedcritical
Malicious code in @usaa-grp-personal-profile/personal-profile-common (npm)
Malicious package @usaa-grp-personal-profile/personal-profile-common version 999.0.0 published to public npm as a dependency-confusion attack targeting an organization's internal registry. The package contains preinstall and postinstall hooks that exfiltrate hostname, username, and working directory to an attacker-controlled OAST endpoint on every install.
npmDependency confusionCompromised package - resolvedcritical
Malicious code in create-coin (npm)
create-coin@20.1.1 on npm contained malicious postinstall code that collected sensitive environment variables, credentials, and host reconnaissance data. The package impersonated an esbuild platform build and exfiltrated data to a hardcoded endpoint.
npmCompromised packageTyposquatting - resolvedcritical
Malicious code in @syncraft-labs/vue (npm)
The npm package @syncraft-labs/vue version 0.4.1 contained malicious obfuscated code in its ESM build that implements a blockchain-hosted C2 dropper (EtherHiding pattern), enabling remote code execution on any consumer importing the package.
npmCompromised package