Malicious code in aitable-workflow-server (npm)
Malicious code was published in aitable-workflow-server (npm) version 9.9.9. The package contains OS command execution and outbound HTTP POST requests for host reconnaissance and data beaconing, with no legitimate workflow-server functionality.
- Disclosed
- Last updated
- Blast radius
- Unknown; depends on adoption of version 9.9.9
- Ecosystems
- Attack vectors
- Affected entities
- aitable-workflow-server · 9.9.9
The npm package aitable-workflow-server version 9.9.9 was found to contain malicious code in its dist/index.js file. The package name resembles a legitimate workflow tool, but the shipped bundle implements only host reconnaissance and data exfiltration functionality.
The malicious code combines OS command execution (ping commands) with outbound HTTP POST requests to an external endpoint, consistent with a data beaconing pattern. The package contains no code implementing the advertised workflow-server functionality.
The version number 9.9.9 follows a pattern frequently observed in dependency-confusion attacks targeting internal package names. The incident was identified and credited to the OpenSSF malicious-packages repository.
Indicators of compromise
- Packages
- aitable-workflow-server@9.9.9
Remediation
- Remove aitable-workflow-server version 9.9.9 from all environments
- Audit package.json and lock files for any dependency on aitable-workflow-server
- Review outbound network connections from systems that may have installed this package
- If installed, assume host compromise and conduct forensic analysis for data exfiltration
- Verify the legitimacy of any workflow-server dependencies before installation
Sources
- GitHub Advisory GHSA-558j-7qm6-gmf2 · GitHub Advisory Database
Cite this entry
"Malicious code in aitable-workflow-server (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 7, 2026; last updated August 7, 2026. https://supplychainattack.org/incident/malicious-code-in-aitable-workflow-server-npm-19gpay
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedcritical
Malicious code in depcruise-wrap-stream-in-html (npm)
depcruise-wrap-stream-in-html@99.9.1 is a malicious npm package that mimics an internal helper of dependency-cruiser. It is a hollow package that downloads and executes arbitrary code from a Google Cloud Storage bucket during installation.
npmCompromised packageDependency confusionTyposquatting - resolvedcritical
Malicious code in fastly-vcl-language-client (npm)
The npm package fastly-vcl-language-client contained malicious code in a preinstall script that collected system information and CI environment variables, exfiltrating data to an external webhook endpoint. The package appears to be a dependency-confusion attack targeting internal Fastly tooling.
npmCompromised packageDependency confusion - containedcritical
Malicious code in alelo-utils (npm)
Malicious code in alelo-utils npm package version 99.0.0 exfiltrates system information and credentials during installation. The package uses preinstall and postinstall scripts to collect hostname, username, environment variables, .npmrc tokens, .env files, and cloud credentials, sending them to an attacker-controlled IP address.
npmCompromised packageDependency confusion - resolvedcritical
Malicious code in alelo-sdk (npm)
alelo-sdk@99.0.0 on npm contains malicious lifecycle scripts that harvest sensitive environment data (credentials, tokens, secrets) and exfiltrate it to a hardcoded IP endpoint. The package uses dependency confusion tactics targeting a private 'alelo' scope with an inflated version number.
npmCompromised packageDependency confusion