@shared-web/assetsnpm
Advisory published Updated
@shared-web/assets is a confirmed malicious npm package (MAL-2026-16283) that steals credentials and exfiltrates sensitive data (malicious version 9.9.10). Do not install it — remove it immediately and rotate any exposed credentials.
Malicious code in @shared-web/assets (npm)
What this malware does
The package runs an install lifecycle script (node index.js) and also executes ./lib/core.js on require. That code collects os.userInfo().username, os.hostname(), and process.cwd() and issues a DNS resolve4 for a label chain of the form <pkg>.<user>.<host>.<cwd>.<ts>.oob.algamil7x.xyz, exfiltrating installer identity and working-directory information over DNS to an attacker-controlled domain. The destination host and the os/dns/process module names are obfuscated in lib/c5df9a.js and lib/b4ce8f.js using char-code byte arrays (String.fromCharCode) and loaded via module.constructor._load instead of plain require, concealing both the APIs and the C2 destination. The obfuscation and DNS-label-encoded channel are inconsistent with the package's presentation as a shared web assets helper.
Malicious versions
Indicators of compromise (SHA-256)
Detection & response playbook
Credential / info stealerFind it
Search your lockfiles and build artifacts for @shared-web/assets (version 9.9.10).
If you installed it — respond
@shared-web/assets is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.
Did it already run?
If @shared-web/assets was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.
Frequently asked questions
Campaign
References
Credits
- Amazon Inspector · finder
Detect & block this
O3 blocks @shared-web/assets-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the credential exfiltration and severs the channel.