{
 "affected": [
  {
   "package": {
    "ecosystem": "npm",
    "name": "log-sink-testmetest"
   },
   "versions": [
    "1.0.1"
   ]
  }
 ],
 "aliases": [
  "MAL-2026-18179"
 ],
 "credits": [
  {
   "contact": [
    "https://protet.io/intel/npm/log-sink-testmetest/1.0.1"
   ],
   "name": "Protet",
   "type": "FINDER"
  }
 ],
 "details": "The package ships a hidden `binding.gyp`, so that installing it makes node-gyp run an obfuscated `index.js`. That loader decrypts the archive's `data.bin` with AES-GCM and gzip and pipes the result into the Bun JavaScript runtime, which it downloads if needed. The decrypted program is a credential-stealing, self-propagating worm: it looks for cloud credentials, GitHub Actions tokens (GITHUB_TOKEN and the OIDC identity token) and `.npmrc` files, reads the victim's GitHub repositories and workflows, and uses npm, PyPI and RubyGems publishing credentials to spread. \n\nImpact: installing the package on a developer machine or CI job puts every credential reachable there at risk, and can lead to malicious releases published from the victim's accounts.\n\nRemediation: remove the package, treat any machine or CI job that installed it as compromised, rotate all credentials, tokens and publishing keys it could reach, review recent releases and workflow changes in repositories it could access, and run installs with scripts disabled (`npm ci --ignore-scripts`) where possible.",
 "id": "PROTET-NPM-2026-16",
 "modified": "2026-10-22T15:33:16Z",
 "published": "2026-10-22T10:49:06Z",
 "references": [
  {
   "type": "REPORT",
   "url": "https://protet.io/intel/npm/log-sink-testmetest/1.0.1"
  }
 ],
 "schema_version": "1.6.0",
 "summary": "Malicious code in log-sink-testmetest (npm)"
}